# Beats **URL:** https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=584 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 585 --- ## [CPU and Memory Usage on Selected Processes](https://discuss.elastic.co/t/cpu-and-memory-usage-on-selected-processes/46453)
**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\ **Replies:** 6\ **Last updated:** [April 18, 2016, 1:59pm UTC](https://discuss.elastic.co/t/cpu-and-memory-usage-on-selected-processes/46453 "2016-04-18T13:59:41Z")
How can i get CPU and Memory for the selected(RED) processes only ? --- ## [Does Winlogbeat work with the Semantic Logging Application Block (SLAB)?](https://discuss.elastic.co/t/does-winlogbeat-work-with-the-semantic-logging-application-block-slab/47524)
**Author:** [@tlv324](https://discuss.elastic.co/u/tlv324)\ **Replies:** 3\ **Last updated:** [April 18, 2016, 1:44pm UTC](https://discuss.elastic.co/t/does-winlogbeat-work-with-the-semantic-logging-application-block-slab/47524 "2016-04-18T13:44:29Z")
I am currently using a shipper than works with SLAB, but has an issue with Shield Authentication. If Winlogbeat works with SLAB, I would be able to switch to that and make my shipping experience much easier! Thanks in … --- ## [Issues running Filebeat on Windows](https://discuss.elastic.co/t/issues-running-filebeat-on-windows/47343)
**Author:** [@jmcinnis](https://discuss.elastic.co/u/jmcinnis)\ **Replies:** 9\ **Last updated:** [April 18, 2016, 1:14pm UTC](https://discuss.elastic.co/t/issues-running-filebeat-on-windows/47343 "2016-04-18T13:14:23Z")
Hi, I have a Windows 7 Client VM that I'm trying to run Filebeat on. I can run "Start-Service filebeat" without getting any errors, but when I look at the log file, it's having a connection failure. My ELK Stack is runni… --- ## [Reliability of Filebeat](https://discuss.elastic.co/t/reliability-of-filebeat/47627)
**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\ **Replies:** 1\ **Last updated:** [April 18, 2016, 11:46am UTC](https://discuss.elastic.co/t/reliability-of-filebeat/47627 "2016-04-18T11:46:31Z")
Is there any documents on the reliability of Filebeat? How does it ensure the reliability of the delivery of the logs. E.g. In packet loss situation, Elasticsearch is down, avoid duplication? Does Filebeat have some ki… --- ## [ParseHttp Exception - runtime error: slice bounds out of range](https://discuss.elastic.co/t/parsehttp-exception-runtime-error-slice-bounds-out-of-range/47628)
**Author:** [@stevebeattie](https://discuss.elastic.co/u/stevebeattie)\ **Replies:** 2\ **Last updated:** [April 18, 2016, 10:16am UTC](https://discuss.elastic.co/t/parsehttp-exception-runtime-error-slice-bounds-out-of-range/47628 "2016-04-18T10:16:43Z")
Hi, We have packetbeat installed on our web servers, occasionally the following is output in /var/log/messages:- Apr 11 16:42:47 web01 /usr/bin/packetbeat\[37929\]: log.go:113: ParseHttp exception. Recovering, but pleas… --- ## [Filebeat 1.1.0: Log Collection Halting](https://discuss.elastic.co/t/filebeat-1-1-0-log-collection-halting/47130)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 17\ **Last updated:** [April 18, 2016, 9:27am UTC](https://discuss.elastic.co/t/filebeat-1-1-0-log-collection-halting/47130 "2016-04-18T09:27:57Z")
Hi, I've started log collection for a cassandra cluster and am seeing some odd behaviour. That is, when I start the service in debug mode I see the log lines being processed and published to the remote logstash endpoint… --- ## [Install filebeat on centos 6.4](https://discuss.elastic.co/t/install-filebeat-on-centos-6-4/47602)
**Author:** [@babeesh](https://discuss.elastic.co/u/babeesh)\ **Replies:** 4\ **Last updated:** [April 18, 2016, 5:42am UTC](https://discuss.elastic.co/t/install-filebeat-on-centos-6-4/47602 "2016-04-18T05:42:52Z")
Any one please tell me, how to install filebeat on centos 6.4... --- ## [Topbeat does not start for Windows server 2008 R2 Sp1](https://discuss.elastic.co/t/topbeat-does-not-start-for-windows-server-2008-r2-sp1/37301)
**Author:** [@Rishi\_Singhal](https://discuss.elastic.co/u/Rishi_Singhal)\ **Replies:** 5\ **Last updated:** [April 16, 2016, 4:34pm UTC](https://discuss.elastic.co/t/topbeat-does-not-start-for-windows-server-2008-r2-sp1/37301 "2016-04-16T16:34:11Z")
I am trying to start Topbeat (topbeat-1.0.0-windows) on Windows server 2008 R2 Sp1 and I get this error PS C:\\Program Files\\Topbeat\> Start-Service topbeat Start-Service : Service 'topbeat (topbeat)' cannot be started d… --- ## [Are the MySQL responses captured by Packetbeat?](https://discuss.elastic.co/t/are-the-mysql-responses-captured-by-packetbeat/47408)
**Author:** [@srpatatas](https://discuss.elastic.co/u/srpatatas)\ **Replies:** 2\ **Last updated:** [April 15, 2016, 3:25pm UTC](https://discuss.elastic.co/t/are-the-mysql-responses-captured-by-packetbeat/47408 "2016-04-15T15:25:43Z")
Hi, I didn't find any mentions on the documentation or forum, is packetbeat able to capture the response values from the mysql queries? For example if I have a "SELECT x from table\_y where id='123'" I know packetbeat wil… --- ## [Filebeat 1.1.0: Multiline Patterns](https://discuss.elastic.co/t/filebeat-1-1-0-multiline-patterns/46947)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 11\ **Last updated:** [April 15, 2016, 2:00pm UTC](https://discuss.elastic.co/t/filebeat-1-1-0-multiline-patterns/46947 "2016-04-15T14:00:18Z")
Hi, Does filebeat have any definitions for common patterns that need to be matched in log lines? Could the logstash grok patterns be reused? Is there a way I could make a set of pattern definitions available to filebeat? … --- ## [Does Topbeat Also Send to UDP 25826 By Default?](https://discuss.elastic.co/t/does-topbeat-also-send-to-udp-25826-by-default/47439)
**Author:** [@nocode](https://discuss.elastic.co/u/nocode)\ **Replies:** 3\ **Last updated:** [April 15, 2016, 1:48pm UTC](https://discuss.elastic.co/t/does-topbeat-also-send-to-udp-25826-by-default/47439 "2016-04-15T13:48:07Z")
I'm learning ELK and had a setup for Topbeat (server metrics) and Filebeat going into a Logstash config over port 5000. That's working fine and I was able to load the Topbeat Dashboards, etc. I wanted to use CollectD … --- ## [Packetbeat: Not listening to mysql](https://discuss.elastic.co/t/packetbeat-not-listening-to-mysql/44101)
**Author:** [@krushnat\_khawale](https://discuss.elastic.co/u/krushnat_khawale)\ **Replies:** 10\ **Last updated:** [April 15, 2016, 1:21pm UTC](https://discuss.elastic.co/t/packetbeat-not-listening-to-mysql/44101 "2016-04-15T13:21:48Z")
I'm using packetbeat for monitoring MySQL, I've configured it using following configuration but it is not listening to the ports. interfaces: device: 0 protocols: dns: ports: \[53\] include\_additionals: tr… --- ## [File beat reading data from rotated File not in prospect](https://discuss.elastic.co/t/file-beat-reading-data-from-rotated-file-not-in-prospect/47400)
**Author:** [@Rachit\_Puri](https://discuss.elastic.co/u/Rachit_Puri)\ **Replies:** 3\ **Last updated:** [April 15, 2016, 10:38am UTC](https://discuss.elastic.co/t/file-beat-reading-data-from-rotated-file-not-in-prospect/47400 "2016-04-15T10:38:39Z")
I am using two filebeat instance to dump logs from my application server. One dumps the accessLog and the other dumps the tomcat logs. My pipeline is Filebeat - Logstash - ElasticSearch. Application logs have rotation p… --- ## [How to troubleshoot basic installation - Windows 10](https://discuss.elastic.co/t/how-to-troubleshoot-basic-installation-windows-10/47388)
**Author:** [@stephenpatten](https://discuss.elastic.co/u/stephenpatten)\ **Replies:** 1\ **Last updated:** [April 15, 2016, 2:44am UTC](https://discuss.elastic.co/t/how-to-troubleshoot-basic-installation-windows-10/47388 "2016-04-15T02:44:19Z")
Hello, This is my first installation of ELK and everything is working except adding PacketBeat. What are the steps to verify basic installation of the PB Service, beyond it not starting, which in my case works. There i… --- ## [Output different prospectors' logs to different Elasticsearch indices?](https://discuss.elastic.co/t/output-different-prospectors-logs-to-different-elasticsearch-indices/47444)
**Author:** [@datn](https://discuss.elastic.co/u/datn)\ **Replies:** 1\ **Last updated:** [April 15, 2016, 2:22am UTC](https://discuss.elastic.co/t/output-different-prospectors-logs-to-different-elasticsearch-indices/47444 "2016-04-15T02:22:42Z")
I'm building a simple setup that uses filebeat to write straight to elasticsearch. I fear the answer to the following will be "run multiple filebeat instances", but is there any hope of configuring multiple output indice… --- ## [Issue shipping Winlogbeat 5.x to Elasticsearch 2.x](https://discuss.elastic.co/t/issue-shipping-winlogbeat-5-x-to-elasticsearch-2-x/47301)
**Author:** [@Ethan](https://discuss.elastic.co/u/Ethan)\ **Replies:** 6\ **Last updated:** [April 14, 2016, 6:19pm UTC](https://discuss.elastic.co/t/issue-shipping-winlogbeat-5-x-to-elasticsearch-2-x/47301 "2016-04-14T18:19:07Z")
This is a really basic question, but I have done some googling with no positive results. I just spun up an install of winlogbeat using the instructions in the configuration documentation. It was all fine and dandy, and… --- ## [Error: Cannot start service winlogbeat](https://discuss.elastic.co/t/error-cannot-start-service-winlogbeat/47138)
**Author:** [@dickepa](https://discuss.elastic.co/u/dickepa)\ **Replies:** 9\ **Last updated:** [April 14, 2016, 4:23pm UTC](https://discuss.elastic.co/t/error-cannot-start-service-winlogbeat/47138 "2016-04-14T16:23:41Z")
Hi I'm trying to install Winlogbeat https://download.elastic.co/beats/winlogbeat/winlogbeat-5.0.0-alpha1-windows-64.zip with little success. I have followed the instructions and have configured the YAML but it refuses to… --- ## [Packetbeat requirements using a SPAN interface](https://discuss.elastic.co/t/packetbeat-requirements-using-a-span-interface/47387)
**Author:** [@ada\_pozo](https://discuss.elastic.co/u/ada_pozo)\ **Replies:** 1\ **Last updated:** [April 14, 2016, 12:53pm UTC](https://discuss.elastic.co/t/packetbeat-requirements-using-a-span-interface/47387 "2016-04-14T12:53:35Z")
Hi, What are the traffic requirements of packetbeat in order to capture HTTP transactions from a third computer using the SPAN interface of a router? Is it mandatory to be the sender or receiver of the HTTP traffic?… --- ## [Defining filebeat prospector paths with regex?](https://discuss.elastic.co/t/defining-filebeat-prospector-paths-with-regex/47310)
**Author:** [@RobertC](https://discuss.elastic.co/u/RobertC)\ **Replies:** 1\ **Last updated:** [April 14, 2016, 12:03pm UTC](https://discuss.elastic.co/t/defining-filebeat-prospector-paths-with-regex/47310 "2016-04-14T12:03:51Z")
Hi, I'm using filebeat 1.2.1 and very happy for the new environment variable feature! Thank you. Another thing that would be very helpful if we could define the prospector paths using regular expressions? That would … --- ## [Build failure. docker-compose not found on Solaris](https://discuss.elastic.co/t/build-failure-docker-compose-not-found-on-solaris/47346)
**Author:** [@ryumei](https://discuss.elastic.co/u/ryumei)\ **Replies:** 5\ **Last updated:** [April 14, 2016, 11:49am UTC](https://discuss.elastic.co/t/build-failure-docker-compose-not-found-on-solaris/47346 "2016-04-14T11:49:13Z")
I tried to build beats on Solaris 11.2 x86. Version: (commit) 56a029633a00b8fc19c4ad00cab42d63ab7ac138 Operating System: SunOS goshawk 5.11 11.2 i86pc i386 i86pc Solaris golang: go1.6.1 solaris/amd64 I cloned repos… --- ## [Adding high availability options to libbeat](https://discuss.elastic.co/t/adding-high-availability-options-to-libbeat/46272)
**Author:** [@Avleen\_Vig](https://discuss.elastic.co/u/Avleen_Vig)\ **Replies:** 4\ **Last updated:** [April 14, 2016, 3:13am UTC](https://discuss.elastic.co/t/adding-high-availability-options-to-libbeat/46272 "2016-04-14T03:13:23Z")
Hi folks, About a year and a half ago we added a number of options to a local fork of logstash-forwarder, for high availability. The two main things we needed at the time were: 1. Having a concept of "destinations". … --- ## [Windows service on Server 2003 does not log to mybeat.log](https://discuss.elastic.co/t/windows-service-on-server-2003-does-not-log-to-mybeat-log/47177)
**Author:** [@jstmatt](https://discuss.elastic.co/u/jstmatt)\ **Replies:** 4\ **Last updated:** [April 14, 2016, 1:17am UTC](https://discuss.elastic.co/t/windows-service-on-server-2003-does-not-log-to-mybeat-log/47177 "2016-04-14T01:17:27Z")
Hi, new-ish user here... I am able to get Filebeat 1.2.1 (same effect on 1.1.1) running on a Windows 2003 server from the console, no problem. It reads the logs, writes to its own log files, and places the registry fil… --- ## [How to generate month instead of weekly indexes in winlogbeat?](https://discuss.elastic.co/t/how-to-generate-month-instead-of-weekly-indexes-in-winlogbeat/47037)
**Author:** [@anhlqn](https://discuss.elastic.co/u/anhlqn)\ **Replies:** 10\ **Last updated:** [April 13, 2016, 9:46pm UTC](https://discuss.elastic.co/t/how-to-generate-month-instead-of-weekly-indexes-in-winlogbeat/47037 "2016-04-13T21:46:09Z")
Hi all, If I use winlogbeat to send Windows log directly to ES, what is the config syntax in winlogbeat.yml to generate monthly indexes? I have tried the syntax below but it did not work index: "\[winlogbeat-\]YYYY.M… --- ## [Filebeat overwrites log file source field](https://discuss.elastic.co/t/filebeat-overwrites-log-file-source-field/47233)
**Author:** [@indreek](https://discuss.elastic.co/u/indreek)\ **Replies:** 3\ **Last updated:** [April 13, 2016, 7:26pm UTC](https://discuss.elastic.co/t/filebeat-overwrites-log-file-source-field/47233 "2016-04-13T19:26:55Z")
I have a log file with data "event": "response", "timestamp": 1460542601136, "id": "1460542601136:tw-api-test:11613:imx8v2w8:10545", "instance": "http://127.0.0.1:3000", "labels": \["api"\], "method": "post", "path"… --- ## [How to "exclude\_lines but make these exceptions"?](https://discuss.elastic.co/t/how-to-exclude-lines-but-make-these-exceptions/46917)
**Author:** [@erikstephens](https://discuss.elastic.co/u/erikstephens)\ **Replies:** 8\ **Last updated:** [April 13, 2016, 2:17pm UTC](https://discuss.elastic.co/t/how-to-exclude-lines-but-make-these-exceptions/46917 "2016-04-13T14:17:50Z")
I'm shipping syslog with custom template to log the severity. I'm using exclude\_lines to not bother shipping anything with severity greater than severity info. I'd like to make an exception for a handful of processes t… --- ## [Beats send logs to redis](https://discuss.elastic.co/t/beats-send-logs-to-redis/43679)
**Author:** [@Jeferson\_Martins](https://discuss.elastic.co/u/Jeferson_Martins)\ **Replies:** 8\ **Last updated:** [April 13, 2016, 2:02pm UTC](https://discuss.elastic.co/t/beats-send-logs-to-redis/43679 "2016-04-13T14:02:08Z")
I want only to use multipline and ship logs to redis. What version of beats have redis output? I read about this and the last version does't output to redis. --- ## [Multiline Config Failing](https://discuss.elastic.co/t/multiline-config-failing/47078)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 6\ **Last updated:** [April 13, 2016, 12:07pm UTC](https://discuss.elastic.co/t/multiline-config-failing/47078 "2016-04-13T12:07:30Z")
Hi, My filebeat prospector config looks like this: filebeat: prospectors: - document\_type: cassandra input\_type: log paths: - /var/log/cassandra/\*.log - /var/log/cassandra… --- ## [FileBeat Sends the same file content again and again](https://discuss.elastic.co/t/filebeat-sends-the-same-file-content-again-and-again/47219)
**Author:** [@Gaurav\_Harsola](https://discuss.elastic.co/u/Gaurav_Harsola)\ **Replies:** 7\ **Last updated:** [April 13, 2016, 10:53am UTC](https://discuss.elastic.co/t/filebeat-sends-the-same-file-content-again-and-again/47219 "2016-04-13T10:53:13Z")
Hi, I have file beat agent running on one machine with conf as filebeat: prospectors: - paths: - /var/logs/apache/\*.log input\_type: log registry\_file: /var/lib/filebeat/registry outpu… --- ## [Panic when using json overwrite\_keys option and elasticsearch output](https://discuss.elastic.co/t/panic-when-using-json-overwrite-keys-option-and-elasticsearch-output/47168)
**Author:** [@jeffearl](https://discuss.elastic.co/u/jeffearl)\ **Replies:** 1\ **Last updated:** [April 12, 2016, 8:19pm UTC](https://discuss.elastic.co/t/panic-when-using-json-overwrite-keys-option-and-elasticsearch-output/47168 "2016-04-12T20:19:04Z")
I'm testing the new json support in filebeat 5.0.0-alpha1. I'm having an issue sending json output to elasticsearch with the overwrite\_keys option. If overwrite\_keys is enabled, the filebeat process crashes. Debug output… --- ## [TopBeat CPU performance counter](https://discuss.elastic.co/t/topbeat-cpu-performance-counter/46826)
**Author:** [@jeremy.cruz](https://discuss.elastic.co/u/jeremy.cruz)\ **Replies:** 3\ **Last updated:** [April 12, 2016, 5:23pm UTC](https://discuss.elastic.co/t/topbeat-cpu-performance-counter/46826 "2016-04-12T17:23:28Z")
I am trying to setup a visualization related to CPU performance for some of our application servers. I want to make sure that the visualization is providing the most accurate information to our customers. The Question … [Previous page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=583) [Next page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=585)