# Auditbeat File Integrity appending random string to file.path

**URL:** <https://discuss.elastic.co/t/auditbeat-file-integrity-appending-random-string-to-file-path/222261>\
**Category:** Beats\
**Tags:** auditbeat\
**Created:** [March 5, 2020, 10:10am UTC](https://discuss.elastic.co/t/auditbeat-file-integrity-appending-random-string-to-file-path/222261 "2020-03-05T10:10:38Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![willemdh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/willemdh/32/16922_2.png) [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Post date:** [March 5, 2020, 10:10am UTC](https://discuss.elastic.co/t/auditbeat-file-integrity-appending-random-string-to-file-path/222261/1 "2020-03-05T10:10:38Z")

</div>

Hello,

Just noticed that Auditbeat 7.5.2 File Integrity module seems to sometimes append a weird string to the file.path values, for example:

![image](https://us1.discourse-cdn.com/elastic/original/3X/7/7/775a4d4c93eb3b4fdcff4a79e4df57194e07b3a3.png)

![image](https://us1.discourse-cdn.com/elastic/original/3X/7/c/7c8bb90aff1a4c9ca9051146a100c351a78c8da0.png)

Is this a known issue? I'm not sure how to reproduce.

Grtz

Willem

---

<div class="post-metadata">

**Author:** ![jsoriano](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsoriano/32/27920_2.png) [@jsoriano](https://discuss.elastic.co/u/jsoriano)\
**Post date:** [March 5, 2020, 4:42pm UTC](https://discuss.elastic.co/t/auditbeat-file-integrity-appending-random-string-to-file-path/222261/2 "2020-03-05T16:42:51Z")

</div>

Hey @willemdh,

If files with these paths don't exist, auditbeat is probably failing to get some extra information. These failures should appear in events and in logs. Do you see any error in auditbeat logs, or in the events containing these paths?  
Could you share any of the events with these paths?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 26, 2020, 4:42pm UTC](https://discuss.elastic.co/t/auditbeat-file-integrity-appending-random-string-to-file-path/222261/3 "2020-03-26T16:42:55Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.