# Beats
**URL:** https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=602
[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)
**Page:** 603
---
## [Libbeat documentation](https://discuss.elastic.co/t/libbeat-documentation/28304)
**Author:** [@deviantony](https://discuss.elastic.co/u/deviantony)\
**Replies:** 4\
**Last updated:** [September 5, 2015, 7:54am UTC](https://discuss.elastic.co/t/libbeat-documentation/28304 "2015-09-05T07:54:22Z")
Hello there, Is there any existing resources (docs, tutorials, best practices...) about how to begin/use the libbeat library to create a shipper?
---
## [Packetbeat for windows?](https://discuss.elastic.co/t/packetbeat-for-windows/25205)
**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Replies:** 6\
**Last updated:** [September 4, 2015, 7:27pm UTC](https://discuss.elastic.co/t/packetbeat-for-windows/25205 "2015-09-04T19:27:14Z")
I want to install packetbeat latest version for windows. In elastic.co there is no windows version. Can anyone help me for installing packetbeat in windows.?
---
## [Will packetbeat remain free?](https://discuss.elastic.co/t/will-packetbeat-remain-free/1580)
**Author:** [@kitex](https://discuss.elastic.co/u/kitex)\
**Replies:** 4\
**Last updated:** [September 4, 2015, 7:25pm UTC](https://discuss.elastic.co/t/will-packetbeat-remain-free/1580 "2015-09-04T19:25:59Z")
I was wondering if packetbeat will remail free?
---
## [Negative MongoDB responsetime](https://discuss.elastic.co/t/negative-mongodb-responsetime/28157)
**Author:** [@Augustin\_Chen](https://discuss.elastic.co/u/Augustin_Chen)\
**Replies:** 3\
**Last updated:** [September 1, 2015, 5:24am UTC](https://discuss.elastic.co/t/negative-mongodb-responsetime/28157 "2015-09-01T05:24:54Z")
Hi, I install the packetbeat-1.0.0-beta2-x86\_64.rpm in my MongoDB instance. I notice the negative response time in the kibana. Any ideas of this?
---
## [Remove packetbeat references form libbeat](https://discuss.elastic.co/t/remove-packetbeat-references-form-libbeat/27829)
**Author:** [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Replies:** 11\
**Last updated:** [August 28, 2015, 11:17am UTC](https://discuss.elastic.co/t/remove-packetbeat-references-form-libbeat/27829 "2015-08-28T11:17:47Z")
As packetbeat was the first beat, there are still quite a few references in the libbeat library. The most obvious one is that the fallback elasticsearch index is called packetbeat. So for example for topbeat, the index p…
---
## [Http monitoring support on l4/l7 switches](https://discuss.elastic.co/t/http-monitoring-support-on-l4-l7-switches/28030)
**Author:** [@elric](https://discuss.elastic.co/u/elric)\
**Replies:** 0\
**Last updated:** [August 25, 2015, 3:40pm UTC](https://discuss.elastic.co/t/http-monitoring-support-on-l4-l7-switches/28030 "2015-08-25T15:40:00Z")
Hi there, I've been using the packetbeat to monitoring rest api server using http protocol. When I call rest api directly, the packetbeat doing well. but it does not working with l7 switch. I heard about that it works…
---
## [How to mention credentials of shield for packetbeat?](https://discuss.elastic.co/t/how-to-mention-credentials-of-shield-for-packetbeat/27885)
**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Replies:** 3\
**Last updated:** [August 23, 2015, 2:06pm UTC](https://discuss.elastic.co/t/how-to-mention-credentials-of-shield-for-packetbeat/27885 "2015-08-23T14:06:30Z")
I installed shield for authentication purpose. I have created a user. Now im unable to start the service packetbeat. Can you tell me how to mention credentials in .yml file. or how to start packetbeat service with that…
---
## [Exploring Beats for data storage performance analysis](https://discuss.elastic.co/t/exploring-beats-for-data-storage-performance-analysis/27616)
**Author:** [@sourishm](https://discuss.elastic.co/u/sourishm)\
**Replies:** 1\
**Last updated:** [August 21, 2015, 8:16pm UTC](https://discuss.elastic.co/t/exploring-beats-for-data-storage-performance-analysis/27616 "2015-08-21T20:16:58Z")
Hi, Is there a roadmap or plan to develop a beat for data storage performance analysis? PacketBeat is for network analysis and a similar solution for data storage metrics will definately make sense. I have used Elastis…
---
## [Version compatibility of Kibana with Packetbeat](https://discuss.elastic.co/t/version-compatibility-of-kibana-with-packetbeat/27632)
**Author:** [@Shashank](https://discuss.elastic.co/u/Shashank)\
**Replies:** 1\
**Last updated:** [August 20, 2015, 9:20am UTC](https://discuss.elastic.co/t/version-compatibility-of-kibana-with-packetbeat/27632 "2015-08-20T09:20:35Z")
Hi, I have started working on Packetbeat & Elasticsearch and need to integrate it Kibana. I found https://www.elastic.co/subscriptions/matrix#matrix\_compatibility Supported Beats Versions Beats Version Compatibilit…
---
## [The client\_location doesn't appear in the output fieds](https://discuss.elastic.co/t/the-client-location-doesnt-appear-in-the-output-fieds/27734)
**Author:** [@Augustin\_Chen](https://discuss.elastic.co/u/Augustin_Chen)\
**Replies:** 1\
**Last updated:** [August 20, 2015, 7:57am UTC](https://discuss.elastic.co/t/the-client-location-doesnt-appear-in-the-output-fieds/27734 "2015-08-20T07:57:08Z")
Hi, My http protocols look like the following. It appears the client\_location never appears in the output fields. Is there is somehting wrong in my configuration? protocols: http: # Configure the ports where to lis…
---
## [Monitoring the Redis using pacetbet](https://discuss.elastic.co/t/monitoring-the-redis-using-pacetbet/27652)
**Author:** [@Augustin\_Chen](https://discuss.elastic.co/u/Augustin_Chen)\
**Replies:** 2\
**Last updated:** [August 20, 2015, 7:23am UTC](https://discuss.elastic.co/t/monitoring-the-redis-using-pacetbet/27652 "2015-08-20T07:23:30Z")
Hi, We build the log system using the infrastructure redis+logstsh+kibana. And we plan to monitor the performance of the redis instance using the packetbeat. The configure files looks like the following. protocols: …
---
## [Exploring beats for Windows EventLog capture](https://discuss.elastic.co/t/exploring-beats-for-windows-eventlog-capture/27417)
**Author:** [@johnpickett](https://discuss.elastic.co/u/johnpickett)\
**Replies:** 2\
**Last updated:** [August 18, 2015, 10:44pm UTC](https://discuss.elastic.co/t/exploring-beats-for-windows-eventlog-capture/27417 "2015-08-18T22:44:32Z")
My organization is working on an ELK implementation project. One area we've experienced difficulties is gathering Windows EventLog data. In the community, the current best option appears to be using a local syslog app …
---
## [Data usage on socket for http request](https://discuss.elastic.co/t/data-usage-on-socket-for-http-request/27577)
**Author:** [@nsiitk](https://discuss.elastic.co/u/nsiitk)\
**Replies:** 1\
**Last updated:** [August 18, 2015, 11:22am UTC](https://discuss.elastic.co/t/data-usage-on-socket-for-http-request/27577 "2015-08-18T11:22:41Z")
how to calculate data usage for a http request or for socket created by http connect request.
---
## [Redis : packetbeat key not recreated is redis server restart](https://discuss.elastic.co/t/redis-packetbeat-key-not-recreated-is-redis-server-restart/27296)
**Author:** [@Alexandre\_Derumier](https://discuss.elastic.co/u/Alexandre_Derumier)\
**Replies:** 1\
**Last updated:** [August 18, 2015, 4:27am UTC](https://discuss.elastic.co/t/redis-packetbeat-key-not-recreated-is-redis-server-restart/27296 "2015-08-18T04:27:20Z")
Hi, I have noticed that packetbeat key in redis (if we use redis output), is not recreated if the redis server restart. restarting packetbeat after redis restart , recreate correctly the key.
---
## [HTTP Protocol not sending header](https://discuss.elastic.co/t/http-protocol-not-sending-header/27359)
**Author:** [@iemem15](https://discuss.elastic.co/u/iemem15)\
**Replies:** 1\
**Last updated:** [August 17, 2015, 9:54am UTC](https://discuss.elastic.co/t/http-protocol-not-sending-header/27359 "2015-08-17T09:54:49Z")
Hi when sending info to elasticsearch I can't see the headers for the http protocol, Im using packet beats beta 2. I started with -d "httpdetailed" and I see the headers, but can't see them in elasticsearch I've configur…
---
## [\[resolved\] Error when trying to build packetbeat from sources](https://discuss.elastic.co/t/resolved-error-when-trying-to-build-packetbeat-from-sources/27137)
**Author:** [@Keylor42](https://discuss.elastic.co/u/Keylor42)\
**Replies:** 3\
**Last updated:** [August 11, 2015, 1:35pm UTC](https://discuss.elastic.co/t/resolved-error-when-trying-to-build-packetbeat-from-sources/27137 "2015-08-11T13:35:51Z")
Hello everyone, I would like to implement the memcached protocol for Packetbeat and so to begin I try to compile packetbeat from the github sources. But when I run make, I have some errors and I can't find a solution a…
---
## [Support for Postgres extended queries](https://discuss.elastic.co/t/support-for-postgres-extended-queries/27166)
**Author:** [@syunusic](https://discuss.elastic.co/u/syunusic)\
**Replies:** 1\
**Last updated:** [August 11, 2015, 1:34pm UTC](https://discuss.elastic.co/t/support-for-postgres-extended-queries/27166 "2015-08-11T13:34:26Z")
This is the same issue than the one exposed at https://github.com/elastic/packetbeat/issues/78?\_pjax=%23js-repo-pjax-container, but maybe here is the correct plase to ask this: Is there any idea when Postgres extended qu…
---
## ["Cannot read property 'group' of undefined" with MongoDB](https://discuss.elastic.co/t/cannot-read-property-group-of-undefined-with-mongodb/27048)
**Author:** [@Keylor42](https://discuss.elastic.co/u/Keylor42)\
**Replies:** 3\
**Last updated:** [August 10, 2015, 2:02pm UTC](https://discuss.elastic.co/t/cannot-read-property-group-of-undefined-with-mongodb/27048 "2015-08-10T14:02:12Z")
Hi everyone, I'm currently testing Packetbeat, elasticsearch and Kibana with MongoDB queries. Everything seems to work fine, except that I have a fair amount of unexcpected "otherCommand" queries, and when I try to launc…
---
## [Libbeat ignore outgoing messages](https://discuss.elastic.co/t/libbeat-ignore-outgoing-messages/26678)
**Author:** [@Esquive](https://discuss.elastic.co/u/Esquive)\
**Replies:** 1\
**Last updated:** [August 3, 2015, 8:05am UTC](https://discuss.elastic.co/t/libbeat-ignore-outgoing-messages/26678 "2015-08-03T08:05:30Z")
Hello, I used packetbeat on multiple hosts. So I needed to disable the outgoing messages. The problem was that despite having a proper configuration of /etc/hostname and /etc/hosts, in the publisher class it was not r…
---
## [Install from source and run as non-root](https://discuss.elastic.co/t/install-from-source-and-run-as-non-root/26430)
**Author:** [@JanJ](https://discuss.elastic.co/u/JanJ)\
**Replies:** 2\
**Last updated:** [July 30, 2015, 7:59pm UTC](https://discuss.elastic.co/t/install-from-source-and-run-as-non-root/26430 "2015-07-30T19:59:07Z")
Hi there, can Packetbeat be meaningfully run using a non root user? I've got the following limitations on my servers (provided by another department in our company): Only standard RedHat packages can be installed…
---
## [Issues with packetbeat](https://discuss.elastic.co/t/issues-with-packetbeat/26414)
**Author:** [@CaptTofu](https://discuss.elastic.co/u/CaptTofu)\
**Replies:** 2\
**Last updated:** [July 29, 2015, 9:19am UTC](https://discuss.elastic.co/t/issues-with-packetbeat/26414 "2015-07-29T09:19:39Z")
Hi there! I've been testing out packetbeat as a hobby and I have a couple issues. First, one where packetbeat won't start: Fail to set the IP addresses: ERR command not allowed when used memory \> 'maxmemory' /usr/…
---
## [Reading packets from pcap file](https://discuss.elastic.co/t/reading-packets-from-pcap-file/26278)
**Author:** [@catwallader](https://discuss.elastic.co/u/catwallader)\
**Replies:** 4\
**Last updated:** [July 28, 2015, 8:49am UTC](https://discuss.elastic.co/t/reading-packets-from-pcap-file/26278 "2015-07-28T08:49:30Z")
Is it possible to read packets from an exiting pcap file. I see that packetbeat has a -I option, which I thought would be an input file, but it doesn't seem to be.
---
## [Adding support for UDP Based Protocols](https://discuss.elastic.co/t/adding-support-for-udp-based-protocols/25859)
**Author:** [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Replies:** 2\
**Last updated:** [July 21, 2015, 4:43am UTC](https://discuss.elastic.co/t/adding-support-for-udp-based-protocols/25859 "2015-07-21T04:43:04Z")
In order to add support for application layer protocols that operate over UDP packetbeat first needs to add support for UDP. Is anyone currently working on adding UDP support? Let’s discuss the changes necessary to add U…
---
## [OrientDB support in packetbeat](https://discuss.elastic.co/t/orientdb-support-in-packetbeat/25674)
**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\
**Replies:** 1\
**Last updated:** [July 16, 2015, 10:12am UTC](https://discuss.elastic.co/t/orientdb-support-in-packetbeat/25674 "2015-07-16T10:12:50Z")
Hi Team, Is there any way to capture OrientDB traffic in packetbeat?
---
## [Packetbeat 1.0.0-beta2 is available](https://discuss.elastic.co/t/packetbeat-1-0-0-beta2-is-available/25509)
**Author:** [@monica](https://discuss.elastic.co/u/monica)\
**Replies:** 1\
**Last updated:** [July 15, 2015, 9:55pm UTC](https://discuss.elastic.co/t/packetbeat-1-0-0-beta2-is-available/25509 "2015-07-15T21:55:35Z")
Support for MongoDB, multiple Elasticsearch nodes and other goodies are included in the Packetbeat 1.0.0-beta2 release. Check the release notes.
---
## [Error with packetbeat after shield installation?](https://discuss.elastic.co/t/error-with-packetbeat-after-shield-installation/24924)
**Author:** [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Replies:** 3\
**Last updated:** [July 6, 2015, 9:07pm UTC](https://discuss.elastic.co/t/error-with-packetbeat-after-shield-installation/24924 "2015-07-06T21:07:56Z")
while im starting the packetbeat service as /etc/init.d/packetbeat start Its giving me error as: output.go:64: ERR Fail to set \_ttl mapping: ES returned an error: 401 Unauthorized publish.go:232: ERR Fail to initiali…
---
## [Mysql select problem](https://discuss.elastic.co/t/mysql-select-problem/24423)
**Author:** [@andrea\_patricelli](https://discuss.elastic.co/u/andrea_patricelli)\
**Replies:** 3\
**Last updated:** [June 30, 2015, 4:05pm UTC](https://discuss.elastic.co/t/mysql-select-problem/24423 "2015-06-30T16:05:26Z")
Hi all, I've a problem monitoring mysql selects. Some of them are not published to my elasticsearch, for example all "select \* from table", or "select name from table" where name is a varchar. It is a strange behavior,…
---
## [Windows support?](https://discuss.elastic.co/t/windows-support/24421)
**Author:** [@andrea\_patricelli](https://discuss.elastic.co/u/andrea_patricelli)\
**Replies:** 1\
**Last updated:** [June 30, 2015, 1:22pm UTC](https://discuss.elastic.co/t/windows-support/24421 "2015-06-30T13:22:48Z")
Hi all, there will be in the near future support by packetbeat for Windows?
---
## [Sniffer not fully working](https://discuss.elastic.co/t/sniffer-not-fully-working/1531)
**Author:** [@moreno](https://discuss.elastic.co/u/moreno)\
**Replies:** 8\
**Last updated:** [June 18, 2015, 9:13am UTC](https://discuss.elastic.co/t/sniffer-not-fully-working/1531 "2015-06-18T09:13:39Z")
I have installed the agent on ubuntu running HAPROXY with multiple ports backends. We have high traffic sites but it looks like nothing is really recording on elastcisearch. sudo packetbeat -e -d "publish" -N does sh…
---
## [New Protocol: SIP](https://discuss.elastic.co/t/new-protocol-sip/2357)
**Author:** [@BenGatewood](https://discuss.elastic.co/u/BenGatewood)\
**Replies:** 1\
**Last updated:** [June 17, 2015, 4:12pm UTC](https://discuss.elastic.co/t/new-protocol-sip/2357 "2015-06-17T16:12:46Z")
Would love to see support for this. Anything I can do to help?
[Previous page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=601)
[Next page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=603)