# Bug - Regex parsing for procs setting in topbeat.yml

**URL:** <https://discuss.elastic.co/t/bug-regex-parsing-for-procs-setting-in-topbeat-yml/46422>\
**Category:** Beats\
**Created:** [April 5, 2016, 3:23pm UTC](https://discuss.elastic.co/t/bug-regex-parsing-for-procs-setting-in-topbeat-yml/46422 "2016-04-05T15:23:38Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![janwillemvd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/janwillemvd/32/8901_2.png) [@janwillemvd](https://discuss.elastic.co/u/janwillemvd)\
**Post date:** [April 5, 2016, 3:23pm UTC](https://discuss.elastic.co/t/bug-regex-parsing-for-procs-setting-in-topbeat-yml/46422/1 "2016-04-05T15:23:38Z")

</div>

Hi,

It looks like there is a bug with respect to the 'procs' setting in topbeat.yml.

We followed the instructions on [https://www.elastic.co/guide/en/beats/topbeat/current/topbeat-configuration.html](https://www.elastic.co/guide/en/beats/topbeat/current/topbeat-configuration.html) and we use the following regular expression for the 'procs' setting: procs: ["^$"] (as we're not interested in monitoring processes). After restarting the topbeat service all processes are still monitored.

When we change the setting to procs: ["^mongod$"] only the mongod process is monitored. This works as expected.

It looks like the '^$' regex is not correctly parsed?

We're using debian.

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [April 5, 2016, 4:17pm UTC](https://discuss.elastic.co/t/bug-regex-parsing-for-procs-setting-in-topbeat-yml/46422/2 "2016-04-05T16:17:32Z")

</div>

Use the following to disable procs:

```auto
input:
  stats:
    process: false

```

See: [https://www.elastic.co/guide/en/beats/topbeat/current/configuration-input.html#\_stats](https://www.elastic.co/guide/en/beats/topbeat/current/configuration-input.html#_stats)

There is a bug in 1.2.0 with regard to the `$` character. We have prepared a fix and included it in the 5.0.0-alpha1.

/cc: @dedemorton I suggest updating the Topbeat Getting Started page to recommend the config snippit above where the page says "If you are not interested in monitoring processes, you can use:"

---

<div class="post-metadata">

**Author:** ![janwillemvd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/janwillemvd/32/8901_2.png) [@janwillemvd](https://discuss.elastic.co/u/janwillemvd)\
**Post date:** [April 5, 2016, 5:37pm UTC](https://discuss.elastic.co/t/bug-regex-parsing-for-procs-setting-in-topbeat-yml/46422/3 "2016-04-05T17:37:22Z")

</div>

Hi Andrew,

Thanks for your reply. We're going to try the 'process: false' setting.

---

<div class="post-metadata">

**Author:** ![janwillemvd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/janwillemvd/32/8901_2.png) [@janwillemvd](https://discuss.elastic.co/u/janwillemvd)\
**Post date:** [April 6, 2016, 6:49am UTC](https://discuss.elastic.co/t/bug-regex-parsing-for-procs-setting-in-topbeat-yml/46422/4 "2016-04-06T06:49:06Z")

</div>

Hi Andrew,

Maybe this is also already fixed in the alpha version you mentioned, but the default topbeat.yml has a typo on line 18:  
`# per process statistics, by default is true proc: true`  
This should be:  
`# per process statistics, by default is true process: true`

(we're using version 1.2.0)

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [April 6, 2016, 6:51am UTC](https://discuss.elastic.co/t/bug-regex-parsing-for-procs-setting-in-topbeat-yml/46422/5 "2016-04-06T06:51:20Z")

</div>

It's not fixed. I noticed it while responding earlier and created an issue: [https://github.com/elastic/beats/issues/1323](https://github.com/elastic/beats/issues/1323)

Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 9:53pm UTC](https://discuss.elastic.co/t/bug-regex-parsing-for-procs-setting-in-topbeat-yml/46422/6 "2017-07-05T21:53:46Z")

</div>