# Beats **URL:** https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=600 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 601 --- ## [Topbeat leaks handles on Windows](https://discuss.elastic.co/t/topbeat-leaks-handles-on-windows/34704)
**Author:** [@lrolsen](https://discuss.elastic.co/u/lrolsen)\ **Replies:** 2\ **Last updated:** [November 16, 2015, 11:14pm UTC](https://discuss.elastic.co/t/topbeat-leaks-handles-on-windows/34704 "2015-11-16T23:14:20Z")
Topbeat seems to be leaking handles on Windows (2012R2). After running for appx. 12hours on a box with 16GB memory the taskmanager shows more than 250.000 handles (see screenshot below). After we kill the topbeat process… --- ## [Logstash cannot consume Filebeat events](https://discuss.elastic.co/t/logstash-cannot-consume-filebeat-events/34453)
**Author:** [@ogauchard](https://discuss.elastic.co/u/ogauchard)\ **Replies:** 6\ **Last updated:** [November 16, 2015, 11:56am UTC](https://discuss.elastic.co/t/logstash-cannot-consume-filebeat-events/34453 "2015-11-16T11:56:29Z")
Hello, I have a log file with 4000 lines and I am trying to consume it with filebeat. Using elasticsearch output, it works. I can retreive 4000 documents in my index. But when I use logstash output, my index only h… --- ## [Ignore\_older - Infrequently updated log file](https://discuss.elastic.co/t/ignore-older-infrequently-updated-log-file/34532)
**Author:** [@ccannell](https://discuss.elastic.co/u/ccannell)\ **Replies:** 1\ **Last updated:** [November 13, 2015, 8:29pm UTC](https://discuss.elastic.co/t/ignore-older-infrequently-updated-log-file/34532 "2015-11-13T20:29:08Z")
I just migrated to filebeats yesterday, am just starting to look into how it's performing. Need some clarification on the ignore\_older parameter. Does this mean if a file hasn't been updated in the defined time, it is … --- ## ["ERR failed to initialize logstash plugin... key file not configured"](https://discuss.elastic.co/t/err-failed-to-initialize-logstash-plugin-key-file-not-configured/33077)
**Author:** [@evileric77](https://discuss.elastic.co/u/evileric77)\ **Replies:** 34\ **Last updated:** [November 13, 2015, 4:15pm UTC](https://discuss.elastic.co/t/err-failed-to-initialize-logstash-plugin-key-file-not-configured/33077 "2015-11-13T16:15:54Z")
I've successfully setup logstash-forwarder without much issue on windows, but when I try to setup filebeat I get this key error. I've set the key according to: https://www.elastic.co/guide/en/beats/filebeat/current/\_log… --- ## [TCP/UDP configuration question](https://discuss.elastic.co/t/tcp-udp-configuration-question/34445)
**Author:** [@uvmvball](https://discuss.elastic.co/u/uvmvball)\ **Replies:** 3\ **Last updated:** [November 13, 2015, 1:43pm UTC](https://discuss.elastic.co/t/tcp-udp-configuration-question/34445 "2015-11-13T13:43:58Z")
I'm new to the packetbeat world and have installed beta3 (will get to the rc1 shortly), but am trying to enable the TCP/UDP protocol and can't seem to figure out where to enable that to see info to send to elastic. I've… --- ## [Will packetbeat support TNS protocol?](https://discuss.elastic.co/t/will-packetbeat-support-tns-protocol/34491)
**Author:** [@oraant](https://discuss.elastic.co/u/oraant)\ **Replies:** 1\ **Last updated:** [November 13, 2015, 7:36am UTC](https://discuss.elastic.co/t/will-packetbeat-support-tns-protocol/34491 "2015-11-13T07:36:49Z")
Seems like it's a new product,will it support monitor Oracle? If will,then what's the time? And I want to know release date about this product. --- ## [TCP protocol](https://discuss.elastic.co/t/tcp-protocol/33927)
**Author:** [@choused](https://discuss.elastic.co/u/choused)\ **Replies:** 2\ **Last updated:** [November 12, 2015, 9:57pm UTC](https://discuss.elastic.co/t/tcp-protocol/33927 "2015-11-12T21:57:25Z")
I'm trying to monitor applications that don't have plugins built for them yet (MSSQL, etc.). I don't need to know the contents but just starting with the count would be great. I was hoping to use TCP as the protocol in… --- ## [TopBeat Features](https://discuss.elastic.co/t/topbeat-features/34431)
**Author:** [@j0nix](https://discuss.elastic.co/u/j0nix)\ **Replies:** 1\ **Last updated:** [November 12, 2015, 8:52pm UTC](https://discuss.elastic.co/t/topbeat-features/34431 "2015-11-12T20:52:29Z")
Most people argue that basic server metrics to monitor is CPU load, free memory & swap, disk space, disk I/O, and network/bandwidth I/O. Even if Topbeat include & extend some of these metrics it is also missing some. S… --- ## [Elasticsearch 2 + topology chart](https://discuss.elastic.co/t/elasticsearch-2-topology-chart/34320)
**Author:** [@Carlos\_Vega\_Moreno](https://discuss.elastic.co/u/Carlos_Vega_Moreno)\ **Replies:** 2\ **Last updated:** [November 12, 2015, 4:16pm UTC](https://discuss.elastic.co/t/elasticsearch-2-topology-chart/34320 "2015-11-12T16:16:10Z")
Elasticsearch 2 doesn't work with Kibana 3 and the topology chart. Is there any alternative to get it working? Is there any expected date for the topology plugin for Kibana? It would be great. https://www.elastic.co/gu… --- ## [Topbeat Dashboard shows strange numbers in RC1](https://discuss.elastic.co/t/topbeat-dashboard-shows-strange-numbers-in-rc1/33988)
**Author:** [@owulff](https://discuss.elastic.co/u/owulff)\ **Replies:** 2\ **Last updated:** [November 12, 2015, 12:20pm UTC](https://discuss.elastic.co/t/topbeat-dashboard-shows-strange-numbers-in-rc1/33988 "2015-11-12T12:20:12Z")
Hi all I've upgraded to RC1. I updated the template, deleted old indexes and re-created the index pattern in Kibana. Finally I updated the Beats dashboard. I liked to see % for filesystem usage and GB, MB etc in Beta 4… --- ## [Add process user name](https://discuss.elastic.co/t/add-process-user-name/29463)
**Author:** [@owulff](https://discuss.elastic.co/u/owulff)\ **Replies:** 4\ **Last updated:** [November 12, 2015, 8:47am UTC](https://discuss.elastic.co/t/add-process-user-name/29463 "2015-11-12T08:47:47Z")
Hi there I've run some tests with topbeat and I really like it. What I'm missing so far is the username of the process. Applications are running with dedicated local users for isolation purposes on the same server. The… --- ## [Topbeat with redis](https://discuss.elastic.co/t/topbeat-with-redis/34157)
**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\ **Replies:** 8\ **Last updated:** [November 12, 2015, 2:57am UTC](https://discuss.elastic.co/t/topbeat-with-redis/34157 "2015-11-12T02:57:26Z")
topbeat version 1.0.0rc logstash 2.0 redis I am using the following in my logstash conf: input { beats { port =\> 5044 type =\> "X" } } output { if \[type\] == "X" { redis { host =\> "192.168.99.… --- ## [ERR Failed to Perform Many Index Operations](https://discuss.elastic.co/t/err-failed-to-perform-many-index-operations/33684)
**Author:** [@jbiggley](https://discuss.elastic.co/u/jbiggley)\ **Replies:** 6\ **Last updated:** [November 9, 2015, 11:45pm UTC](https://discuss.elastic.co/t/err-failed-to-perform-many-index-operations/33684 "2015-11-09T23:45:04Z")
We're trying to get filebeat to run on our logstash host to test the ingestion of logs but we keep getting the same error regardless of the config. I've pasted the config file we are using below which results in the err… --- ## [All String fields are splitting for / - \_](https://discuss.elastic.co/t/all-string-fields-are-splitting-for--/34059)
**Author:** [@slourenco](https://discuss.elastic.co/u/slourenco)\ **Replies:** 3\ **Last updated:** [November 9, 2015, 5:57pm UTC](https://discuss.elastic.co/t/all-string-fields-are-splitting-for--/34059 "2015-11-09T17:57:21Z")
After upgrading and loading the new index file to elasticsearch, all data on dashboards are splitting and grouping by the the parts the field like query, path and so on. --- ## [Beats starting kit](https://discuss.elastic.co/t/beats-starting-kit/33640)
**Author:** [@mrkschan](https://discuss.elastic.co/u/mrkschan)\ **Replies:** 8\ **Last updated:** [November 9, 2015, 3:54pm UTC](https://discuss.elastic.co/t/beats-starting-kit/33640 "2015-11-09T15:54:10Z")
Hey beats team, I'm really happy to hear the concept of Sysbeat at https://discuss.elastic.co/t/is-there-interest-in-something-like-a-monitbeat/32316/2?u=mrkschan. Though, before that we may need to have more specific … --- ## [Script for generating index template and ascii doc](https://discuss.elastic.co/t/script-for-generating-index-template-and-ascii-doc/33756)
**Author:** [@mrkschan](https://discuss.elastic.co/u/mrkschan)\ **Replies:** 9\ **Last updated:** [November 9, 2015, 9:33am UTC](https://discuss.elastic.co/t/script-for-generating-index-template-and-ascii-doc/33756 "2015-11-09T09:33:25Z")
There are scripts living in topbeat that generates index template and ascii doc. Though, they are not supporting nested data type yet. Is nested data type a good practice to use in ES? If yes, shall they be supported in … --- ## [Negative responsetime for HTTP call](https://discuss.elastic.co/t/negative-responsetime-for-http-call/33990)
**Author:** [@bobmercer](https://discuss.elastic.co/u/bobmercer)\ **Replies:** 1\ **Last updated:** [November 7, 2015, 8:44pm UTC](https://discuss.elastic.co/t/negative-responsetime-for-http-call/33990 "2015-11-07T20:44:01Z")
Hi ! I have now played on packetbeat for a couple of weekds and everything was fine until I add new http ports on my packetbeat.yml configuration file. Since then, some events have been sent to the elasticsearch cluster … --- ## [How to append a JSON string to libbeat event?](https://discuss.elastic.co/t/how-to-append-a-json-string-to-libbeat-event/34020)
**Author:** [@ray](https://discuss.elastic.co/u/ray)\ **Replies:** 2\ **Last updated:** [November 7, 2015, 6:30am UTC](https://discuss.elastic.co/t/how-to-append-a-json-string-to-libbeat-event/34020 "2015-11-07T06:30:31Z")
I'm new to both libbeat and golang so hope someone could give me some clues. Btw, I haven't got any ideas after search on this board or even google. So basically I'm writing a Beat for my product. It receives JSON even… --- ## [Log4J socket appender to Beats](https://discuss.elastic.co/t/log4j-socket-appender-to-beats/34000)
**Author:** [@mdconner](https://discuss.elastic.co/u/mdconner)\ **Replies:** 1\ **Last updated:** [November 6, 2015, 10:54pm UTC](https://discuss.elastic.co/t/log4j-socket-appender-to-beats/34000 "2015-11-06T22:54:43Z")
Any plans to support Log4J in Beats as a SocketAppender or some other mechanism besides file? I'd love not to parse log output to ensure data is formatted consistently. Would also like it to support other logging libr… --- ## [\[odbcbeat\] Gather analytics from SQL databases](https://discuss.elastic.co/t/odbcbeat-gather-analytics-from-sql-databases/34019)
**Author:** [@ei-grad](https://discuss.elastic.co/u/ei-grad)\ **Replies:** 1\ **Last updated:** [November 6, 2015, 5:16pm UTC](https://discuss.elastic.co/t/odbcbeat-gather-analytics-from-sql-databases/34019 "2015-11-06T17:16:29Z")
Hi! Is there any existing solution to periodically execute SQL queries, and put result to ElasticSearch? I'm pretty new to Go, and think that writing a new beat for that could be also a good start to dive in Go. But … --- ## [Misleading type attribute in filebeat config](https://discuss.elastic.co/t/misleading-type-attribute-in-filebeat-config/33221)
**Author:** [@owulff](https://discuss.elastic.co/u/owulff)\ **Replies:** 4\ **Last updated:** [November 6, 2015, 12:08pm UTC](https://discuss.elastic.co/t/misleading-type-attribute-in-filebeat-config/33221 "2015-11-06T12:08:11Z")
Hi all I've set up FileBeat with Logstash and followed the documentation here: https://www.elastic.co/guide/en/beats/libbeat/master/configuration.html#configuration-output The doc states do configure the following ma… --- ## [Topbeat doesn't work in unix machine](https://discuss.elastic.co/t/topbeat-doesnt-work-in-unix-machine/33507)
**Author:** [@mdaoor](https://discuss.elastic.co/u/mdaoor)\ **Replies:** 4\ **Last updated:** [November 6, 2015, 5:25am UTC](https://discuss.elastic.co/t/topbeat-doesnt-work-in-unix-machine/33507 "2015-11-06T05:25:34Z")
i've a linux machine that has elasticsearch and kibana installed on it ,and unix machine that has topbeat installed on it , i tried to run the topbeat but with no luck -bash: ./topbeat: Invalid argument i tried all… --- ## [Installing topbeats on a windows machine](https://discuss.elastic.co/t/installing-topbeats-on-a-windows-machine/33079)
**Author:** [@aviv.ratzon](https://discuss.elastic.co/u/aviv.ratzon)\ **Replies:** 2\ **Last updated:** [November 5, 2015, 9:36am UTC](https://discuss.elastic.co/t/installing-topbeats-on-a-windows-machine/33079 "2015-11-05T09:36:48Z")
Hi, I'm trying to install topbeats, but when I run the command in power shell it doesn't ouput anything and when trying to start the service it says it can't find it. The only thing the installation does is replace the … --- ## [File changes not detected after a while](https://discuss.elastic.co/t/file-changes-not-detected-after-a-while/33304)
**Author:** [@jhidalgo](https://discuss.elastic.co/u/jhidalgo)\ **Replies:** 14\ **Last updated:** [November 5, 2015, 9:30am UTC](https://discuss.elastic.co/t/file-changes-not-detected-after-a-while/33304 "2015-11-05T09:30:51Z")
I am checking the loadbalancer feature, in my test seems like filebeat stalls after a while. I have an elk cluster with 4 LS nodes. I have a loop generating msgs to /var/log/messages constantly, and when I start filebeat… --- ## [Spool size on filebeat](https://discuss.elastic.co/t/spool-size-on-filebeat/33771)
**Author:** [@voipoclay](https://discuss.elastic.co/u/voipoclay)\ **Replies:** 1\ **Last updated:** [November 5, 2015, 2:04am UTC](https://discuss.elastic.co/t/spool-size-on-filebeat/33771 "2015-11-05T02:04:55Z")
Hello all! Would someone mind explaining to me how the spool\_size parameter affects the beats output? Does it make it faster? Is it the amount of lines per transmission? Thanks --- ## [Coexistence with logstash-forwarder](https://discuss.elastic.co/t/coexistence-with-logstash-forwarder/33632)
**Author:** [@Cylindric](https://discuss.elastic.co/u/Cylindric)\ **Replies:** 4\ **Last updated:** [November 3, 2015, 3:42pm UTC](https://discuss.elastic.co/t/coexistence-with-logstash-forwarder/33632 "2015-11-03T15:42:30Z")
I'm a bit confused about how FileBeat fits in with a logstash setup that already includes logstash-forwarder. I have a couple of logstash config files for defining inputs for both LF and FB: # 01-lumberjack-input.con… --- ## [New protocol: AMQP (0.9.1)](https://discuss.elastic.co/t/new-protocol-amqp-0-9-1/27272)
**Author:** [@Keylor42](https://discuss.elastic.co/u/Keylor42)\ **Replies:** 12\ **Last updated:** [November 3, 2015, 3:19pm UTC](https://discuss.elastic.co/t/new-protocol-amqp-0-9-1/27272 "2015-11-03T15:19:49Z")
Hello there, my company is highly interested in monitoring AMQP protocol (version 0.9.1, this is relevant), used by RabbitMQ. I like challenges so I intend to implement i myself, except if someone is already working on i… --- ## [Using filebeat , logstash grok does't work](https://discuss.elastic.co/t/using-filebeat-logstash-grok-doest-work/33598)
**Author:** [@beta\_beta](https://discuss.elastic.co/u/beta_beta)\ **Replies:** 1\ **Last updated:** [November 3, 2015, 9:25am UTC](https://discuss.elastic.co/t/using-filebeat-logstash-grok-doest-work/33598 "2015-11-03T09:25:12Z")
This is my config file , I can't match and remove\_field input { beats { port =\> 5047 add\_field =\> { "type" =\> "ad\_engine"} } } filter { grok { patt… --- ## [Filebeat hangs when logstash dies](https://discuss.elastic.co/t/filebeat-hangs-when-logstash-dies/33406)
**Author:** [@erikstephens](https://discuss.elastic.co/u/erikstephens)\ **Replies:** 3\ **Last updated:** [November 3, 2015, 7:44am UTC](https://discuss.elastic.co/t/filebeat-hangs-when-logstash-dies/33406 "2015-11-03T07:44:48Z")
I'm seeing the connection made to the logstash server stuck in a state of CLOSE\_WAIT when logstash goes offline. My expectation is that filebeat would try to re-establish the connection periodically. Anyone else experi… --- ## [Basic bytes/octets per second](https://discuss.elastic.co/t/basic-bytes-octets-per-second/33272)
**Author:** [@Chris\_Clifton](https://discuss.elastic.co/u/Chris_Clifton)\ **Replies:** 3\ **Last updated:** [October 30, 2015, 8:27pm UTC](https://discuss.elastic.co/t/basic-bytes-octets-per-second/33272 "2015-10-30T20:27:17Z")
Does packetbeat + elk support showing basic interface stats like pps or bytes/octets rates? [Previous page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=599) [Next page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=601)