# Beats **URL:** https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=80 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 81 --- ## [Beats index stopped rotating](https://discuss.elastic.co/t/beats-index-stopped-rotating/311353)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 4\ **Last updated:** [August 7, 2022, 11:03pm UTC](https://discuss.elastic.co/t/beats-index-stopped-rotating/311353 "2022-08-07T23:03:26Z")
I am having an issue with my beats index rotating I have the following configurations setup and looks like my data is not going into the right index. Any ideas what may be wrong? --- ## [Filebeat writing to its own index](https://discuss.elastic.co/t/filebeat-writing-to-its-own-index/310842)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 48\ **Last updated:** [August 5, 2022, 3:24pm UTC](https://discuss.elastic.co/t/filebeat-writing-to-its-own-index/310842 "2022-08-05T15:24:51Z")
\###################### Filebeat Configuration ######################### # You can find the full configuration reference here: # https://www.elastic.co/guide/en/beats/filebeat/index.html #===========================… --- ## [Error on filebeat](https://discuss.elastic.co/t/error-on-filebeat/311330)
**Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\ **Replies:** 10\ **Last updated:** [August 5, 2022, 3:19pm UTC](https://discuss.elastic.co/t/error-on-filebeat/311330 "2022-08-05T15:19:57Z")
My elasticsearch and kibana is ok but by filebeat doesn't work but when i do filebeat test config say its ok. Any suggestions for resolve this problem? Thank you. --- ## [Error when installing @elastic/synthetics](https://discuss.elastic.co/t/error-when-installing-elastic-synthetics/311497)
**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\ **Replies:** 1\ **Last updated:** [August 5, 2022, 2:18pm UTC](https://discuss.elastic.co/t/error-when-installing-elastic-synthetics/311497 "2022-08-05T14:18:38Z")
Hello, I'm trying to install npm install -g @elastic/synthetics on my local server but getting an error when running the command: loadCurrentTree ▀ ╢█████████████████████░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░… --- ## [Filebeat mysql module does not work for mariadb logs?](https://discuss.elastic.co/t/filebeat-mysql-module-does-not-work-for-mariadb-logs/311398)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 1:51pm UTC](https://discuss.elastic.co/t/filebeat-mysql-module-does-not-work-for-mariadb-logs/311398 "2022-08-04T13:51:47Z")
Hi, i have filebeat 7.16.2 installed with mysql module enabled to collect mariadb logs. - module: mysql error: enabled: true var.paths: \["/home/user/var/log/\*\_error.log"\] slowlog: enabled: true var.… --- ## [File beat log messages causing disk space to be full](https://discuss.elastic.co/t/file-beat-log-messages-causing-disk-space-to-be-full/310991)
**Author:** [@zanoob](https://discuss.elastic.co/u/zanoob)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 1:02pm UTC](https://discuss.elastic.co/t/file-beat-log-messages-causing-disk-space-to-be-full/310991 "2022-08-04T13:02:57Z")
Hello all, Hope someone had this issue before. Look like my /var/log/messages is getting really high since we have configured filebeat. The disk space is getting lower and almost 95% of this. How can I make sure that… --- ## [Separating heartbeat synthetics logs from the rest](https://discuss.elastic.co/t/separating-heartbeat-synthetics-logs-from-the-rest/311193)
**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\ **Replies:** 7\ **Last updated:** [August 4, 2022, 8:33am UTC](https://discuss.elastic.co/t/separating-heartbeat-synthetics-logs-from-the-rest/311193 "2022-08-04T08:33:16Z")
Hello, I'm setting up Synthetic Monitoring using dockerised heartbeat image and want to separate the synthetics logs from the http/icmp ones. What I've noticed is that with the latest upgrade to 8.3 (or perhaps it was … --- ## [Filebeat consuming high I/O operations for smaller files](https://discuss.elastic.co/t/filebeat-consuming-high-i-o-operations-for-smaller-files/308105)
**Author:** [@diptesh2007](https://discuss.elastic.co/u/diptesh2007)\ **Replies:** 8\ **Last updated:** [August 4, 2022, 7:59am UTC](https://discuss.elastic.co/t/filebeat-consuming-high-i-o-operations-for-smaller-files/308105 "2022-08-04T07:59:39Z")
I have the following architecture: Files (\*.json) of ~1-5 KB gets written to a folder throughout the day where file beat is scanning with a frequency of 10s. A json file once written in the file system will never be up… --- ## [./filebeat setup failed to import dashboard](https://discuss.elastic.co/t/filebeat-setup-failed-to-import-dashboard/311371)
**Author:** [@cheching](https://discuss.elastic.co/u/cheching)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 7:55am UTC](https://discuss.elastic.co/t/filebeat-setup-failed-to-import-dashboard/311371 "2022-08-04T07:55:20Z")
Hello guys, I've encountered an issue when tried to install the filebeat in uBuntu Linux, can I have someone assist to look into below error messages please verwriting ILM policy is disabled. Set setup.ilm.overwrite: t… --- ## [Configuration of heartbeat on Scale](https://discuss.elastic.co/t/configuration-of-heartbeat-on-scale/311027)
**Author:** [@syd05](https://discuss.elastic.co/u/syd05)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 5:33am UTC](https://discuss.elastic.co/t/configuration-of-heartbeat-on-scale/311027 "2022-08-04T05:33:28Z")
Hello, I'm evaluating the option of configuring heartbeat to monitor URL's at scale. I have 1000's of endpoints to monitor with a check interval ranging between 30 seconds to a few minutes . I don't have an idea of how … --- ## [Metricbeat 8.3.2 and mongo V5](https://discuss.elastic.co/t/metricbeat-8-3-2-and-mongo-v5/309912)
**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\ **Replies:** 3\ **Last updated:** [August 3, 2022, 2:57pm UTC](https://discuss.elastic.co/t/metricbeat-8-3-2-and-mongo-v5/309912 "2022-08-03T14:57:11Z")
FYI Metricbeat 8.3.1+ now supports mongo V5. So i downloaded 8.3.2 and configured against my 3 server cluster with replica set. So if i add single server ( i have 3 server cluster with replica set in following template … --- ## [Changing xpack monitoring index](https://discuss.elastic.co/t/changing-xpack-monitoring-index/309422)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 2\ **Last updated:** [August 3, 2022, 1:27pm UTC](https://discuss.elastic.co/t/changing-xpack-monitoring-index/309422 "2022-08-03T13:27:10Z")
Hello, I want to lower the number of indices generated by monitoring modules from filebeat and metricbeat. That monitors logstash, beats, elasticserach and kibana. I would like these indices to be monthly indices. Whe… --- ## [Threat Intel module for Filebeat : aging off and updating documents](https://discuss.elastic.co/t/threat-intel-module-for-filebeat-aging-off-and-updating-documents/311237)
**Author:** [@kossde](https://discuss.elastic.co/u/kossde)\ **Replies:** 1\ **Last updated:** [August 3, 2022, 8:59am UTC](https://discuss.elastic.co/t/threat-intel-module-for-filebeat-aging-off-and-updating-documents/311237 "2022-08-03T08:59:39Z")
Do any of you know whether or not Elasticsearch and the filebeat threat intel module age off old events or update events that have been modified? --- ## [Winlogbeat 8.2.3, loadbalance: true](https://discuss.elastic.co/t/winlogbeat-8-2-3-loadbalance-true/311212)
**Author:** [@Helmut](https://discuss.elastic.co/u/Helmut)\ **Replies:** 7\ **Last updated:** [August 2, 2022, 7:59pm UTC](https://discuss.elastic.co/t/winlogbeat-8-2-3-loadbalance-true/311212 "2022-08-02T19:59:23Z")
Hi, in winlogbeat.yaml I have: output.logstash: hosts: \["logstashA:5044", "logstashB:5044"\] loadbalance: true When either of those hosts is down the other one also does not get events forwarded anymore. Is this a misc… --- ## [Setup.template.name not work](https://discuss.elastic.co/t/setup-template-name-not-work/311160)
**Author:** [@pi314](https://discuss.elastic.co/u/pi314)\ **Replies:** 1\ **Last updated:** [August 2, 2022, 5:22am UTC](https://discuss.elastic.co/t/setup-template-name-not-work/311160 "2022-08-02T05:22:34Z")
I am sending logs to elastic using filebeat but it is not creating the index with the desired name. filebeat version 7.11.0 (amd64), libbeat 7.11.0 \[84c4d4c4034fcb49c1a318ccdc7311d70adee15b built 2021-02-08 22:42:11 +00… --- ## [\[Filebeat\] duplicate output when using queue.disk and restarting](https://discuss.elastic.co/t/filebeat-duplicate-output-when-using-queue-disk-and-restarting/310959)
**Author:** [@Yos](https://discuss.elastic.co/u/Yos)\ **Replies:** 4\ **Last updated:** [August 2, 2022, 12:12am UTC](https://discuss.elastic.co/t/filebeat-duplicate-output-when-using-queue-disk-and-restarting/310959 "2022-08-02T00:12:07Z")
I am facing a problem with duplicate output when using queue.disk with Filebeat and restarting. The contents of filebeat.yml and the operating procedure are as follows filebeat.yml filebeat.inputs: - type: filestream … --- ## [Metricbeat configuration multiples modules with different outputs](https://discuss.elastic.co/t/metricbeat-configuration-multiples-modules-with-different-outputs/311117)
**Author:** [@melzi](https://discuss.elastic.co/u/melzi)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 3:22pm UTC](https://discuss.elastic.co/t/metricbeat-configuration-multiples-modules-with-different-outputs/311117 "2022-08-01T15:22:25Z")
Hello everyone, I have a problem with ELK and I would like to ask you for help... I have activated 2 modules metricbeat: System and Logstash-xpack. I need to send the data from the System module to logstash node and t… --- ## [\_source filed is using to much disk space](https://discuss.elastic.co/t/source-filed-is-using-to-much-disk-space/311103)
**Author:** [@Maksym\_Postument](https://discuss.elastic.co/u/Maksym_Postument)\ **Replies:** 2\ **Last updated:** [August 1, 2022, 12:11pm UTC](https://discuss.elastic.co/t/source-filed-is-using-to-much-disk-space/311103 "2022-08-01T12:11:55Z")
\_source for metricbeat index is using a lot of space. Index size is 15.2gb and \_source filed is 12.2gb. And from 4 kubernetes nodes in one day total size of metricbeat size is 160 gb. Any ideas why metricbeat index size … --- ## [Moving from filebeats 6.8 to 7.10](https://discuss.elastic.co/t/moving-from-filebeats-6-8-to-7-10/310851)
**Author:** [@Ryan5](https://discuss.elastic.co/u/Ryan5)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 10:59am UTC](https://discuss.elastic.co/t/moving-from-filebeats-6-8-to-7-10/310851 "2022-08-01T10:59:02Z")
Hi, We are trying to move from filebeats version 6.8 to 7.10 however, the way to collect docker logs seems to have changed and following the new autodiscover method docker logs are not appearing in elasticsearch but nor… --- ## [Beats on SUSE Linux Enterprise Server 11 (X86\_64)](https://discuss.elastic.co/t/beats-on-suse-linux-enterprise-server-11-x86-64/310885)
**Author:** [@aji.shinde7](https://discuss.elastic.co/u/aji.shinde7)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 10:40am UTC](https://discuss.elastic.co/t/beats-on-suse-linux-enterprise-server-11-x86-64/310885 "2022-08-01T10:40:20Z")
Hello Experts, I was have installed Metricbeat and Filebeat Version 7.16.3 on SUSE Linux Enterprise Server 11 (X86\_64) but its not working. No data is flowing in Elasticsearch Index. I have copied same Metricbeat and F… --- ## [Beats to Logstash pipeline - Self signed cert implementation](https://discuss.elastic.co/t/beats-to-logstash-pipeline-self-signed-cert-implementation/311090)
**Author:** [@sravan\_kaheti](https://discuss.elastic.co/u/sravan_kaheti)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 10:32am UTC](https://discuss.elastic.co/t/beats-to-logstash-pipeline-self-signed-cert-implementation/311090 "2022-08-01T10:32:45Z")
Hi There , I am using filebeat, metricbeat and passing output to my logstash pipeline (version 8.1). I have a requirement that need to implement self signed cert to secure communication between beats to our logstash. B… --- ## [Filebeat sends logs with delay](https://discuss.elastic.co/t/filebeat-sends-logs-with-delay/311038)
**Author:** [@behzad\_alipoor](https://discuss.elastic.co/u/behzad_alipoor)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 8:51am UTC](https://discuss.elastic.co/t/filebeat-sends-logs-with-delay/311038 "2022-08-01T08:51:00Z")
I send logs from filebeat to elasticsearch directly . the service that i use generates logs every second . most of the time it works properly but sometimes the logs reach to elastic after 15 minutes or later and I don'… --- ## [Finding the hostname inside the javascript processor script](https://discuss.elastic.co/t/finding-the-hostname-inside-the-javascript-processor-script/311054)
**Author:** [@Saeed\_Ektesabi2](https://discuss.elastic.co/u/Saeed_Ektesabi2)\ **Replies:** 1\ **Last updated:** [August 1, 2022, 2:36am UTC](https://discuss.elastic.co/t/finding-the-hostname-inside-the-javascript-processor-script/311054 "2022-08-01T02:36:54Z")
Hi all, I am trying to find the hostname inside the javascript script code. I tried to get it using the "os" module, but it seems that it is not available. Are there any other options to achieve this? Also, where can … --- ## [Filebeat not logging hints.enabled container logs](https://discuss.elastic.co/t/filebeat-not-logging-hints-enabled-container-logs/310574)
**Author:** [@dev4elasticapm](https://discuss.elastic.co/u/dev4elasticapm)\ **Replies:** 3\ **Last updated:** [July 30, 2022, 1:19am UTC](https://discuss.elastic.co/t/filebeat-not-logging-hints-enabled-container-logs/310574 "2022-07-30T01:19:06Z")
Hi, I am using ECK, I have configured filebeat with two options hints.enabled: true, which looks for all the containers with co.elastic.logs/enabled: "true" Checks the container containing name ingress. #2 is workin… --- ## [Filebeat won't create custom indices](https://discuss.elastic.co/t/filebeat-wont-create-custom-indices/310988)
**Author:** [@issy](https://discuss.elastic.co/u/issy)\ **Replies:** 1\ **Last updated:** [July 29, 2022, 4:18pm UTC](https://discuss.elastic.co/t/filebeat-wont-create-custom-indices/310988 "2022-07-29T16:18:42Z")
I'm trying to have custom indices for different filebeat modules. In this example i want to have a custom indices for the apache module, but it doesn't seem to work. indices: - index: "filebeat-%{\[agent.version\]}-apac… --- ## [Problem with GROK when coming from filebeat (bracket parsing)](https://discuss.elastic.co/t/problem-with-grok-when-coming-from-filebeat-bracket-parsing/310883)
**Author:** [@79g](https://discuss.elastic.co/u/79g)\ **Replies:** 3\ **Last updated:** [July 29, 2022, 8:21am UTC](https://discuss.elastic.co/t/problem-with-grok-when-coming-from-filebeat-bracket-parsing/310883 "2022-07-29T08:21:10Z")
Hello all, I'm sending some Filebeat logs to an Elasticsearch pipeline to transform and store on Elasticsearch. The input event looks like: Thu Jul 28 13:57:44 2022 us=22598 1.2.3.4:37491 \[my\_user\] Peer Connection In… --- ## [Store data into elasticsearch without parsing](https://discuss.elastic.co/t/store-data-into-elasticsearch-without-parsing/310854)
**Author:** [@Nil1](https://discuss.elastic.co/u/Nil1)\ **Replies:** 1\ **Last updated:** [July 28, 2022, 11:18pm UTC](https://discuss.elastic.co/t/store-data-into-elasticsearch-without-parsing/310854 "2022-07-28T23:18:57Z")
Good day, I'm setting an elasticsearch as a datalake for AI/ML purposes, I want to have all data in text blobs unparsed, so the AI scripts can work with unstructured data for an NLP project. I have no problems with the… --- ## [Httpjson Input](https://discuss.elastic.co/t/httpjson-input/310884)
**Author:** [@Hani\_Atalla](https://discuss.elastic.co/u/Hani_Atalla)\ **Replies:** 0\ **Last updated:** [July 28, 2022, 2:37pm UTC](https://discuss.elastic.co/t/httpjson-input/310884 "2022-07-28T14:37:38Z")
I am configuring an HTTPJSON Input from Fleet using the UI and doing a POST on a REST endpoint. I need to send a body in the request. The documentation isn't too clear about the format it should be in inside the request … --- ## [How to run packetbeat as non-root in Kubernetes?](https://discuss.elastic.co/t/how-to-run-packetbeat-as-non-root-in-kubernetes/310862)
**Author:** [@yurikizio](https://discuss.elastic.co/u/yurikizio)\ **Replies:** 0\ **Last updated:** [July 28, 2022, 11:55am UTC](https://discuss.elastic.co/t/how-to-run-packetbeat-as-non-root-in-kubernetes/310862 "2022-07-28T11:55:23Z")
Hi, I want to run packetbeat as non-root user because of security issue and I didn't find any solution how to do it. I tried to use these securityContext settings and I received this error. containers: - name:… --- ## [Files Details Monitoring](https://discuss.elastic.co/t/files-details-monitoring/310809)
**Author:** [@KrishnaCh](https://discuss.elastic.co/u/KrishnaCh)\ **Replies:** 1\ **Last updated:** [July 28, 2022, 1:39am UTC](https://discuss.elastic.co/t/files-details-monitoring/310809 "2022-07-28T01:39:30Z")
Hi All, We have a requirement to monitor files details like file name, file size, file created date, file ownership, etc, all within a particular directory. Is there any beats agent that can be used for this monitoring… [Previous page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=79) [Next page](https://discuss.elastic.co/c/elastic-stack/beats/28.md?page=81)