# Beats **URL:** https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=599 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 600 --- ## [Beats repo and Spacewalk](https://discuss.elastic.co/t/beats-repo-and-spacewalk/36043)
**Author:** [@mikula](https://discuss.elastic.co/u/mikula)\ **Replies:** 5\ **Last updated:** [December 1, 2015, 1:39pm UTC](https://discuss.elastic.co/t/beats-repo-and-spacewalk/36043 "2015-12-01T13:39:37Z")
I have one funny problem with beats rpm repo: All beta and rc builds (those with tilde in in name) are in spacewalk considered as "newer" than official build so all systems connected to this repo have "updatable" status … --- ## [Learning to use Topbeat](https://discuss.elastic.co/t/learning-to-use-topbeat/35902)
**Author:** [@puneetaadit](https://discuss.elastic.co/u/puneetaadit)\ **Replies:** 7\ **Last updated:** [December 1, 2015, 11:47am UTC](https://discuss.elastic.co/t/learning-to-use-topbeat/35902 "2015-12-01T11:47:44Z")
Dear All, I am new to Topbeat and looking forward to learn it to monitor the system and its components. I have installed it on Windows and able to start it using Windows power shell but not able to move forward. If you… --- ## [Topbeat does not drop events?](https://discuss.elastic.co/t/topbeat-does-not-drop-events/35800)
**Author:** [@Svenfa](https://discuss.elastic.co/u/Svenfa)\ **Replies:** 2\ **Last updated:** [November 30, 2015, 8:51pm UTC](https://discuss.elastic.co/t/topbeat-does-not-drop-events/35800 "2015-11-30T20:51:17Z")
Hi all, I'm using topbeat 1.0.0 on a few clients (Windows 2k12 and Ubuntu Server 14.04). It's sending the events loadbalanced to two logstash 2.1 instances (which send data to ES 2.0). After a few hours of running w… --- ## [Running LogStash with Beats as Service, stops with Address in use](https://discuss.elastic.co/t/running-logstash-with-beats-as-service-stops-with-address-in-use/36029)
**Author:** [@Adrian\_Martin](https://discuss.elastic.co/u/Adrian_Martin)\ **Replies:** 3\ **Last updated:** [December 1, 2015, 11:43am UTC](https://discuss.elastic.co/t/running-logstash-with-beats-as-service-stops-with-address-in-use/36029 "2015-12-01T11:43:43Z")
I've added --debug to the the rc options and get {:timestamp=\>"2015-12-01T10:26:16.175000+0000", :message=\>"Starting Beats input listener", :address=\>"0.0.0.0:5044", :level=\>:info} {:timestamp=\>"2015-12-01T10:26:16.18… --- ## [Does packet beat work for custom ports or custom protocols?](https://discuss.elastic.co/t/does-packet-beat-work-for-custom-ports-or-custom-protocols/35991)
**Author:** [@rabeetwaqar](https://discuss.elastic.co/u/rabeetwaqar)\ **Replies:** 4\ **Last updated:** [December 1, 2015, 11:01am UTC](https://discuss.elastic.co/t/does-packet-beat-work-for-custom-ports-or-custom-protocols/35991 "2015-12-01T11:01:34Z")
Hi Does packet beat work for custom ports or custom protocols? Thanks --- ## [What is the best setup for Beats and ELK stack](https://discuss.elastic.co/t/what-is-the-best-setup-for-beats-and-elk-stack/35827)
**Author:** [@congpine](https://discuss.elastic.co/u/congpine)\ **Replies:** 3\ **Last updated:** [November 30, 2015, 11:35am UTC](https://discuss.elastic.co/t/what-is-the-best-setup-for-beats-and-elk-stack/35827 "2015-11-30T11:35:54Z")
Hi, This is the setup that I'm currently trying to achieve few months ago with Logstash Forwarder: LF --\> Logstash --\> Redis -\> Logstash Indexer --\> Elasticsearch --\> Kibana However, as Logstash Forwarder will be depreci… --- ## [New protocol: CouchDB](https://discuss.elastic.co/t/new-protocol-couchdb/35538)
**Author:** [@Keylor42](https://discuss.elastic.co/u/Keylor42)\ **Replies:** 8\ **Last updated:** [November 27, 2015, 4:36pm UTC](https://discuss.elastic.co/t/new-protocol-couchdb/35538 "2015-11-27T16:36:51Z")
Hello everyone, While waiting for the contributing agreement for my AMQP plugin, my company asked me if it's possible to implement the couchdb protocol for Packetbeat. So I have two questions : -First, is anybody alr… --- ## [Why there isn't a configuration 'ignore\_incoming'?](https://discuss.elastic.co/t/why-there-isnt-a-configuration-ignore-incoming/35640)
**Author:** [@Augustin\_Chen](https://discuss.elastic.co/u/Augustin_Chen)\ **Replies:** 3\ **Last updated:** [November 27, 2015, 2:18pm UTC](https://discuss.elastic.co/t/why-there-isnt-a-configuration-ignore-incoming/35640 "2015-11-27T14:18:49Z")
I have packetbeat installed in all the EC2 instances. The ignore\_outgoing is set to 'True' which prevents the duplicated transactions being stored in the ES. The applications makes call to MongoDB,as the ignore\_outgoing … --- ## [Exclude files from wildcard path](https://discuss.elastic.co/t/exclude-files-from-wildcard-path/35580)
**Author:** [@danieljamesscott](https://discuss.elastic.co/u/danieljamesscott)\ **Replies:** 2\ **Last updated:** [November 27, 2015, 11:30am UTC](https://discuss.elastic.co/t/exclude-files-from-wildcard-path/35580 "2015-11-27T11:30:32Z")
Hi, Is it possible to exclude files which would otherwise be included in a filebeat path? i.e. I want to include all files in a directory (/var/log/apps/\*), but exclude those that have been rotated and zipped (\*.gz) … --- ## [Exec format error. Binary file not executable on FreeBSD](https://discuss.elastic.co/t/exec-format-error-binary-file-not-executable-on-freebsd/35648)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 2\ **Last updated:** [November 26, 2015, 12:59pm UTC](https://discuss.elastic.co/t/exec-format-error-binary-file-not-executable-on-freebsd/35648 "2015-11-26T12:59:42Z")
From the following url i downloaded filebeat, https://download.elastic.co/beats/filebeat/filebeat-1.0.0-darwin.tgz. untarred it and tried to run filebeat -e -c filebeat.yml -d "publish" as mentioned. I changed filebeat.… --- ## [How to forward logs from a logstash “agent” to “master”](https://discuss.elastic.co/t/how-to-forward-logs-from-a-logstash-agent-to-master/35639)
**Author:** [@Michael\_Bulla](https://discuss.elastic.co/u/Michael_Bulla)\ **Replies:** 6\ **Last updated:** [November 26, 2015, 11:47am UTC](https://discuss.elastic.co/t/how-to-forward-logs-from-a-logstash-agent-to-master/35639 "2015-11-26T11:47:31Z")
Until now my ELK setup looks like this Logstash Forwarder -\> Logstash 1.4 -\> Elstatic Search Now I want to replace the Forwarder by a full blown Logstash, so I can collect data from more inputs than just files and c… --- ## [Libbeat kafka output](https://discuss.elastic.co/t/libbeat-kafka-output/35488)
**Author:** [@mattweber](https://discuss.elastic.co/u/mattweber)\ **Replies:** 3\ **Last updated:** [November 26, 2015, 9:36am UTC](https://discuss.elastic.co/t/libbeat-kafka-output/35488 "2015-11-26T09:36:32Z")
Any plans for a kafka output? Looking to send beat events directly to Kafka which can then be consumed by (multiple) Logstash instances using the Kafka input. --- ## [Unable to capture traffic in Solaris 11](https://discuss.elastic.co/t/unable-to-capture-traffic-in-solaris-11/35575)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 1\ **Last updated:** [November 25, 2015, 8:18pm UTC](https://discuss.elastic.co/t/unable-to-capture-traffic-in-solaris-11/35575 "2015-11-25T20:18:02Z")
Hi, first, sorry about my English. We need to use packetbeat on Solaris 11 servers. Using go 1.5 builds OK: ldd ./packetbeat-1.0.0-rc1 libsocket.so.1 =\> /lib/64/libsocket.so.1 libnsl.so.1 =\> /lib/64/libnsl… --- ## [Multiline codec is not working with filebeats plugin in logstash 2.0.0](https://discuss.elastic.co/t/multiline-codec-is-not-working-with-filebeats-plugin-in-logstash-2-0-0/33768)
**Author:** [@jaybm](https://discuss.elastic.co/u/jaybm)\ **Replies:** 6\ **Last updated:** [November 25, 2015, 2:19pm UTC](https://discuss.elastic.co/t/multiline-codec-is-not-working-with-filebeats-plugin-in-logstash-2-0-0/33768 "2015-11-25T14:19:17Z")
Multiline codec is not working with filebeats plugin (version 0.9.3) in logstash 2.0.0, were as logstash-forwarder plugin works perfectly fine. Here is the code that I am having problem with: input { beats { po… --- ## [Can file beat ship logs over https?](https://discuss.elastic.co/t/can-file-beat-ship-logs-over-https/35531)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 2\ **Last updated:** [November 25, 2015, 9:39am UTC](https://discuss.elastic.co/t/can-file-beat-ship-logs-over-https/35531 "2015-11-25T09:39:30Z")
Can it communicate over https or requires binary protocol? and what are the privileges it requires? --- ## [Parsing Python Logs - Use Logstash or not](https://discuss.elastic.co/t/parsing-python-logs-use-logstash-or-not/35464)
**Author:** [@Mathew\_Mathew](https://discuss.elastic.co/u/Mathew_Mathew)\ **Replies:** 1\ **Last updated:** [November 24, 2015, 4:03pm UTC](https://discuss.elastic.co/t/parsing-python-logs-use-logstash-or-not/35464 "2015-11-24T16:03:00Z")
My current logging infrastructure uses just filebeats and elasticsearch. Would like to enhance the quality of the logs by parsing out individual fields columns. Looking for recommendation on best practice to do this.… --- ## [Issues with encoding](https://discuss.elastic.co/t/issues-with-encoding/35160)
**Author:** [@vinod8427](https://discuss.elastic.co/u/vinod8427)\ **Replies:** 28\ **Last updated:** [November 24, 2015, 10:30am UTC](https://discuss.elastic.co/t/issues-with-encoding/35160 "2015-11-24T10:30:00Z")
I came across a major issue( atleast in my case ). The issue is as explained below and I am assuming it has to do with some sort of encoding. The logs in my case which are being parsed contain special characters and suc… --- ## [ERR File reading error. Stopping harvester. Error: EOF](https://discuss.elastic.co/t/err-file-reading-error-stopping-harvester-error-eof/34764)
**Author:** [@vinod8427](https://discuss.elastic.co/u/vinod8427)\ **Replies:** 10\ **Last updated:** [November 20, 2015, 10:36am UTC](https://discuss.elastic.co/t/err-file-reading-error-stopping-harvester-error-eof/34764 "2015-11-20T10:36:55Z")
I am facing an issue with filebeat halting completely after encountering file reading error (ERR File reading error. Stopping harvester. Error: EOF). The use case is explained as below: We have some logs which are gene… --- ## [WARN Two requests without a Response](https://discuss.elastic.co/t/warn-two-requests-without-a-response/34553)
**Author:** [@jderieg](https://discuss.elastic.co/u/jderieg)\ **Replies:** 7\ **Last updated:** [November 20, 2015, 12:16am UTC](https://discuss.elastic.co/t/warn-two-requests-without-a-response/34553 "2015-11-20T00:16:27Z")
Getting the following message from the packetbeat log repeatedly (about every second or so): "WARN Two requests without a Response. Dropping old request" Just looking for a little clarification as to what this means.… --- ## [Does Packetbeat / Filebeat / Topbeat do store and forward?](https://discuss.elastic.co/t/does-packetbeat-filebeat-topbeat-do-store-and-forward/34821)
**Author:** [@xamox](https://discuss.elastic.co/u/xamox)\ **Replies:** 2\ **Last updated:** [November 19, 2015, 5:41pm UTC](https://discuss.elastic.co/t/does-packetbeat-filebeat-topbeat-do-store-and-forward/34821 "2015-11-19T17:41:32Z")
I've setup a local lab for testing and killed my elasticsearch cluster for a few days and restarted it and noticed all that data seems to be gone after restarting it. I wasn't sure if that data just get's dropped if ela… --- ## [Deployment in a mesh network](https://discuss.elastic.co/t/deployment-in-a-mesh-network/34983)
**Author:** [@Kevin\_Young](https://discuss.elastic.co/u/Kevin_Young)\ **Replies:** 1\ **Last updated:** [November 18, 2015, 9:44pm UTC](https://discuss.elastic.co/t/deployment-in-a-mesh-network/34983 "2015-11-18T21:44:56Z")
Hello, I'm part of an organization that is considering using packetbeat. We've tested it in our development environment and we have found it works great! We have run into one problem though, our network architects ar… --- ## [Interest in LANZBeat?](https://discuss.elastic.co/t/interest-in-lanzbeat/34977)
**Author:** [@smcdon](https://discuss.elastic.co/u/smcdon)\ **Replies:** 1\ **Last updated:** [November 18, 2015, 9:38pm UTC](https://discuss.elastic.co/t/interest-in-lanzbeat/34977 "2015-11-18T21:38:49Z")
Hi, Is there interest in, or is someone in the community already working on, a Beat for LANZ, the Arista Latency Analyzer? LANZ outputs to syslog as well as CSV, and also has a CLI and API. Perhaps using FileBeat via t… --- ## [Filebeat available for AIX?](https://discuss.elastic.co/t/filebeat-available-for-aix/34947)
**Author:** [@ssampati](https://discuss.elastic.co/u/ssampati)\ **Replies:** 1\ **Last updated:** [November 18, 2015, 4:17pm UTC](https://discuss.elastic.co/t/filebeat-available-for-aix/34947 "2015-11-18T16:17:54Z")
Im doing a project to replace Splunk \[:smile:\] using ELK Stack opensource. Im having tough time finding Logstash forwarder agent for AIX. Logstash forwarder java is not working as it is supposed to be, Does Filebeat supp… --- ## [Issues with Topbeat --\> ES since version 1.0.0-rc1](https://discuss.elastic.co/t/issues-with-topbeat-es-since-version-1-0-0-rc1/34928)
**Author:** [@wabit](https://discuss.elastic.co/u/wabit)\ **Replies:** 4\ **Last updated:** [November 18, 2015, 1:55pm UTC](https://discuss.elastic.co/t/issues-with-topbeat-es-since-version-1-0-0-rc1/34928 "2015-11-18T13:55:44Z")
Title says it all really, I am unable to get any metrics to be sent to Elastic search since upgrading topbeat to version 1.0.0-rc1 on Centos 6. I cant see anything in system logs and everything starts up without any… --- ## [Head malformed HTTP response](https://discuss.elastic.co/t/head-malformed-http-response/34875)
**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\ **Replies:** 4\ **Last updated:** [November 18, 2015, 1:52pm UTC](https://discuss.elastic.co/t/head-malformed-http-response/34875 "2015-11-18T13:52:16Z")
Hi, I tried filebeat version 1.0.0-rc2 (amd64), running on a Mac and pointed to ES 1.7.x. It looks like it's reading the log file because it prints nice JSON to console at debug logging level. However, I cannot get i… --- ## [New protocol: AVRO](https://discuss.elastic.co/t/new-protocol-avro/34826)
**Author:** [@darren\_m](https://discuss.elastic.co/u/darren_m)\ **Replies:** 3\ **Last updated:** [November 18, 2015, 7:43am UTC](https://discuss.elastic.co/t/new-protocol-avro/34826 "2015-11-18T07:43:55Z")
Hi, I've searched around a good bit and I don't see any support for AVRO (http://avro.apache.org/). Does anyone know if there's any active work on adding AVRO support? If not I'm willing to work on it. Cheers, darren … --- ## [Static build](https://discuss.elastic.co/t/static-build/34354)
**Author:** [@mterron](https://discuss.elastic.co/u/mterron)\ **Replies:** 1\ **Last updated:** [November 12, 2015, 1:38am UTC](https://discuss.elastic.co/t/static-build/34354 "2015-11-12T01:38:54Z")
Can we get a statically compiled binary instead of the current dynamic linked one? I'd like to use Filebeat on a non glibc based system. This is what the current x86-64 binary looks like: ELF 64-bit LSB executable, x86… --- ## [Testing Protocol with Packets out of order](https://discuss.elastic.co/t/testing-protocol-with-packets-out-of-order/34321)
**Author:** [@lonangel](https://discuss.elastic.co/u/lonangel)\ **Replies:** 3\ **Last updated:** [November 17, 2015, 5:35pm UTC](https://discuss.elastic.co/t/testing-protocol-with-packets-out-of-order/34321 "2015-11-17T17:35:16Z")
Hi, Sorry if this is a very noobish question but I'm only starting with packetbeat and Go. I've been playing around with packetbeat and the ELK stack and decided to implement a new protocol to test how packet beat work… --- ## [FileBeat integration with Logstash](https://discuss.elastic.co/t/filebeat-integration-with-logstash/34819)
**Author:** [@learn2287](https://discuss.elastic.co/u/learn2287)\ **Replies:** 2\ **Last updated:** [November 17, 2015, 5:26pm UTC](https://discuss.elastic.co/t/filebeat-integration-with-logstash/34819 "2015-11-17T17:26:17Z")
I have configured my ELK stack on one of our server & file beat on a remote server. The setup failed initially to listen to my changes on the remote server as i started logstash first and then the filebeat. Then i change… --- ## [How does Filebeat manage problems connecting to Logstash?](https://discuss.elastic.co/t/how-does-filebeat-manage-problems-connecting-to-logstash/34800)
**Author:** [@vmcano](https://discuss.elastic.co/u/vmcano)\ **Replies:** 1\ **Last updated:** [November 17, 2015, 5:11pm UTC](https://discuss.elastic.co/t/how-does-filebeat-manage-problems-connecting-to-logstash/34800 "2015-11-17T17:11:34Z")
Hello all, I'd like to know how Filebeat behaves when it can't connect with Logstash. From the libbeat documentation, in case Logstash is down (or there is a network problem that prevent it reaching Logstash), Filebe… [Previous page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=598) [Next page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=600)