Cant see data from Windows module in kibana

Elastic Stack Beats
1

Hi,

I just installed metricbeat-7.6.2-windows-x86_64-OSS on Windows Server 2008 R2 Enterprise. I have already in kibana metricbeat* index where I monitor Linux servers.
I disabled system.yml and enabled windows.yml module.
When I start metricbeat on windows server I get this messages in log:

2020-06-01T16:41:18.978+0200	INFO	[monitoring]	log/log.go:145	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":0},"total":{"ticks":31,"time":{"ms":31},"value":31},"user":{"ticks":31,"time":{"ms":31}}},"handles":{"open":152},"info":{"ephemeral_id":"09ad283d-a98b-4665-87b2-e45edb03cc57","uptime":{"ms":32891}},"memstats":{"gc_next":7547328,"memory_alloc":5145568,"memory_total":12529496,"rss":34693120},"runtime":{"goroutines":20}},"libbeat":{"config":{"module":{"running":0},"reloads":1,"scans":1},"output":{"type":"elasticsearch"},"pipeline":{"clients":0,"events":{"active":0}}},"system":{"cpu":{"cores":4}}}}}
2020-06-01T16:41:48.977+0200	INFO	[monitoring]	log/log.go:145	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":0},"total":{"ticks":31,"value":31},"user":{"ticks":31}},"handles":{"open":152},"info":{"ephemeral_id":"09ad283d-a98b-4665-87b2-e45edb03cc57","uptime":{"ms":62887}},"memstats":{"gc_next":7547328,"memory_alloc":5189360,"memory_total":12573288,"rss":32768},"runtime":{"goroutines":20}},"libbeat":{"config":{"module":{"running":0}},"pipeline":{"clients":0,"events":{"active":0}}}}}}

But I cant to find this server in my existing metricbeat* index by filtering: beat.name, beat.hostname... etc.
Also no new fields are added into index. Can somebody help??

windows.yml

metricbeat.modules:
- module: windows
  metricsets: ["perfmon"]
  enabled: true
  period: 10s
  perfmon.ignore_non_existent_counters: false
  perfmon.group_measurements_by_instance: false
  perfmon.counters:
  #  - instance_label: processor.name
  #    instance_name: total
  #    measurement_label: processor.time.total.pct
  #    query: '\Processor Information(_Total)\% Processor Time'

- module: windows
  metricsets: ["service"]
  enabled: true
  period: 60s
2

Does metricbeat support Windows Server 2008 R2 Enterprise? I cant see it in https://www.elastic.co/support/matrix

3

Unfortuantely, Metricbeat does not support WS 2008. However, it is possible it might work. Could you please share the debug logs? ./metricbeat -e -d "*"?

EDIT: Support for WS 2008 is going to be added probably in the next release. You can track the progress of this work here: https://github.com/elastic/beats/pull/18458/files

1 Like
4

@kvch here are debug logs:

Thanks

PS C:\Program Files\metricbeat-7.6.2-windows-x86_64> ./metricbeat -e -d "*"
2020-06-02T16:58:17.417+0200    INFO    instance/beat.go:622    Home path: [C:\Program Files\metricbeat-7.6.2-windows-x8
6_64] Config path: [C:\Program Files\metricbeat-7.6.2-windows-x86_64] Data path: [C:\Program Files\metricbeat-7.6.2-wind
ows-x86_64\data] Logs path: [C:\Program Files\metricbeat-7.6.2-windows-x86_64\logs]
2020-06-02T16:58:17.417+0200    DEBUG   [beat]  instance/beat.go:674    Beat metadata path: C:\Program Files\metricbeat-
7.6.2-windows-x86_64\data\meta.json
2020-06-02T16:58:17.417+0200    INFO    instance/beat.go:630    Beat ID: 16fcbc8a-2355-444c-98ac-18b78550e1d6
2020-06-02T16:58:17.418+0200    DEBUG   [filters]       add_cloud_metadata/providers.go:126     add_cloud_metadata: star
ting to fetch metadata, timeout=3s
2020-06-02T16:58:20.447+0200    DEBUG   [filters]       add_cloud_metadata/providers.go:162     add_cloud_metadata: rece
ived disposition for digitalocean after 3.0148055s. result=[provider:digitalocean, error=failed requesting digitalocean
metadata: Get http://169.254.169.254/metadata/v1.json: net/http: request canceled while waiting for connection (Client.T
imeout exceeded while awaiting headers), metadata={}]
2020-06-02T16:58:20.447+0200    DEBUG   [filters]       add_cloud_metadata/providers.go:169     add_cloud_metadata: time
d-out waiting for all responses
2020-06-02T16:58:20.447+0200    DEBUG   [filters]       add_cloud_metadata/providers.go:129     add_cloud_metadata: fetc
hMetadata ran for 3.0148055s
2020-06-02T16:58:20.447+0200    INFO    add_cloud_metadata/add_cloud_metadata.go:89     add_cloud_metadata: hosting prov
ider type not detected.
2020-06-02T16:58:20.447+0200    DEBUG   [processors]    processors/processor.go:101     Generated new processors: add_ho
st_metadata=[netinfo.enabled=[false], cache.ttl=[5m0s]], add_cloud_metadata=null
2020-06-02T16:58:20.447+0200    DEBUG   [seccomp]       seccomp/seccomp.go:96   Syscall filtering is only supported on L
inux
2020-06-02T16:58:20.447+0200    INFO    [beat]  instance/beat.go:958    Beat info       {"system_info": {"beat": {"path"
: {"config": "C:\\Program Files\\metricbeat-7.6.2-windows-x86_64", "data": "C:\\Program Files\\metricbeat-7.6.2-windows-
x86_64\\data", "home": "C:\\Program Files\\metricbeat-7.6.2-windows-x86_64", "logs": "C:\\Program Files\\metricbeat-7.6.
2-windows-x86_64\\logs"}, "type": "metricbeat", "uuid": "16fcbc8a-2355-444c-98ac-18b78550e1d6"}}}
2020-06-02T16:58:20.447+0200    INFO    [beat]  instance/beat.go:967    Build info      {"system_info": {"build": {"comm
it": "d57bcf8684602e15000d65b75afcd110e2b12b59", "libbeat": "7.6.2", "time": "2020-03-26T05:03:39.000Z", "version": "7.6
.2"}}}
2020-06-02T16:58:20.448+0200    INFO    [beat]  instance/beat.go:970    Go runtime info {"system_info": {"go": {"os":"wi
ndows","arch":"amd64","max_procs":4,"version":"go1.13.8"}}}
2020-06-02T16:58:20.448+0200    INFO    [beat]  instance/beat.go:974    Host info       {"system_info": {"host": {"archi
tecture":"x86_64","boot_time":"2020-06-01T00:06:51.83+02:00","name":"TEST","ip":["*.*.*.**/23","::1/128","127.0.0.
1/8"],"kernel_version":"6.1.7601.18409 (win7sp1_gdr.140303-2144)","mac":["************"],"os":{"family":"windows","
platform":"windows","name":"Windows Server 2008 R2 Enterprise","version":"6.1","major":1,"minor":0,"patch":0,"build":"76
01.0"},"timezone":"CEST","timezone_offset_sec":7200,"id":"**************"}}}
2020-06-02T16:58:20.448+0200    INFO    [beat]  instance/beat.go:1003   Process info    {"system_info": {"process": {"cw
d": "C:\\Program Files\\metricbeat-7.6.2-windows-x86_64", "exe": "C:\\Program Files\\metricbeat-7.6.2-windows-x86_64\\me
tricbeat.exe", "name": "metricbeat.exe", "pid": 5596, "ppid": 5456, "start_time": "2020-06-02T16:58:16.722+0200"}}}
2020-06-02T16:58:20.448+0200    INFO    instance/beat.go:298    Setup Beat: metricbeat; Version: 7.6.2
2020-06-02T16:58:20.448+0200    DEBUG   [beat]  instance/beat.go:324    Initializing output plugins
2020-06-02T16:58:20.448+0200    INFO    [index-management]      idxmgmt/std.go:182      Set output.elasticsearch.index t
o 'metricbeat-7.6.2' as ILM is enabled.
2020-06-02T16:58:20.448+0200    INFO    elasticsearch/client.go:174     Elasticsearch url: http://*******:9200
2020-06-02T16:58:20.448+0200    DEBUG   [publisher]     pipeline/consumer.go:137        start pipeline event consumer
2020-06-02T16:58:20.453+0200    INFO    [publisher]     pipeline/module.go:110  Beat name: TEST
2020-06-02T16:58:20.460+0200    DEBUG   [modules]       beater/metricbeat.go:155        Available modules and metricsets
: Register [ModuleFactory:[beat, docker, elasticsearch, kibana, logstash, mongodb, mysql, postgresql, system, uwsgi, win
dows], MetricSetFactory:[aerospike/namespace, apache/status, beat/state, beat/stats, ceph/cluster_disk, ceph/cluster_hea
lth, ceph/cluster_status, ceph/monitor_health, ceph/osd_df, ceph/osd_tree, ceph/pool_disk, consul/agent, couchbase/bucke
t, couchbase/cluster, couchbase/node, couchdb/server, docker/container, docker/cpu, docker/diskio, docker/event, docker/
healthcheck, docker/image, docker/info, docker/memory, docker/network, dropwizard/collector, elasticsearch/ccr, elastics
earch/cluster_stats, elasticsearch/enrich, elasticsearch/index, elasticsearch/index_recovery, elasticsearch/index_summar
y, elasticsearch/ml_job, elasticsearch/node, elasticsearch/node_stats, elasticsearch/pending_tasks, elasticsearch/shard,
 envoyproxy/server, etcd/leader, etcd/metrics, etcd/self, etcd/store, golang/expvar, golang/heap, graphite/server, hapro
xy/info, haproxy/stat, http/json, http/server, jolokia/jmx, kafka/consumergroup, kafka/partition, kibana/stats, kibana/s
tatus, kubernetes/apiserver, kubernetes/container, kubernetes/controllermanager, kubernetes/event, kubernetes/node, kube
rnetes/pod, kubernetes/proxy, kubernetes/scheduler, kubernetes/state_container, kubernetes/state_cronjob, kubernetes/sta
te_deployment, kubernetes/state_node, kubernetes/state_persistentvolume, kubernetes/state_persistentvolumeclaim, kuberne
tes/state_pod, kubernetes/state_replicaset, kubernetes/state_resourcequota, kubernetes/state_service, kubernetes/state_s
tatefulset, kubernetes/system, kubernetes/volume, kvm/dommemstat, logstash/node, logstash/node_stats, memcached/stats, m
ongodb/collstats, mongodb/dbstats, mongodb/metrics, mongodb/replstatus, mongodb/status, munin/node, mysql/galera_status,
 mysql/status, nats/connections, nats/routes, nats/stats, nats/subscriptions, nginx/stubstatus, php_fpm/pool, php_fpm/pr
ocess, postgresql/activity, postgresql/bgwriter, postgresql/database, postgresql/statement, prometheus/collector, rabbit
mq/connection, rabbitmq/exchange, rabbitmq/node, rabbitmq/queue, redis/info, redis/key, redis/keyspace, system/core, sys
tem/cpu, system/diskio, system/filesystem, system/fsstat, system/memory, system/network, system/network_summary, system/
process, system/process_summary, system/raid, system/service, system/socket_summary, system/uptime, traefik/health, uwsg
i/status, vsphere/datastore, vsphere/host, vsphere/virtualmachine, windows/perfmon, windows/service, zookeeper/connectio
n, zookeeper/mntr, zookeeper/server], LightModules:[LightModules:[kafka/broker, kafka/producer, kafka/consumer]]]
2020-06-02T16:58:20.467+0200    INFO    instance/beat.go:439    metricbeat start running.
2020-06-02T16:58:20.467+0200    INFO    [monitoring]    log/log.go:118  Starting metrics logging every 30s
2020-06-02T16:58:20.467+0200    DEBUG   [service]       service/service_windows.go:72   Windows is interactive: true
2020-06-02T16:58:20.468+0200    INFO    cfgfile/reload.go:175   Config reloader started
2020-06-02T16:58:30.501+0200    DEBUG   [cfgfile]       cfgfile/reload.go:205   Scan for new config files
2020-06-02T16:58:30.501+0200    DEBUG   [cfgfile]       cfgfile/cfgfile.go:193  Load config from file: C:\Program Files\
metricbeat-7.6.2-windows-x86_64\modules.d\system.yml
2020-06-02T16:58:30.501+0200    DEBUG   [cfgfile]       cfgfile/cfgfile.go:193  Load config from file: C:\Program Files\
metricbeat-7.6.2-windows-x86_64\modules.d\windows.yml
2020-06-02T16:58:30.501+0200    DEBUG   [cfgfile]       cfgfile/reload.go:224   Number of module configs found: 0
2020-06-02T16:58:30.501+0200    DEBUG   [reload]        cfgfile/list.go:62      Starting reload procedure, current runne
rs: 0
2020-06-02T16:58:30.501+0200    DEBUG   [reload]        cfgfile/list.go:80      Start list: 0, Stop list: 0
2020-06-02T16:58:40.507+0200    DEBUG   [cfgfile]       cfgfile/reload.go:205   Scan for new config files
2020-06-02T16:58:50.498+0200    INFO    [monitoring]    log/log.go:145  Non-zero metrics in the last 30s        {"monito
ring": {"metrics": {"beat":{"cpu":{"system":{"ticks":31,"time":{"ms":31}},"total":{"ticks":31,"time":{"ms":31},"value":3
1},"user":{"ticks":0}},"handles":{"open":176},"info":{"ephemeral_id":"b7d27553-36f5-49a4-bb94-eb1f8c463bc4","uptime":{"m
s":33761}},"memstats":{"gc_next":7032592,"memory_alloc":3778944,"memory_total":12618112,"rss":32251904},"runtime":{"goro
utines":19}},"libbeat":{"config":{"module":{"running":0},"reloads":1,"scans":2},"output":{"type":"elasticsearch"},"pipel
ine":{"clients":0,"events":{"active":0}}},"system":{"cpu":{"cores":4}}}}}
2020-06-02T16:58:50.499+0200    DEBUG   [cfgfile]       cfgfile/reload.go:205   Scan for new config files
2020-06-02T16:59:00.525+0200    DEBUG   [cfgfile]       cfgfile/reload.go:205   Scan for new config files
2020-06-02T16:59:10.540+0200    DEBUG   [cfgfile]       cfgfile/reload.go:205   Scan for new config files
2020-06-02T16:59:20.509+0200    INFO    [monitoring]    log/log.go:145  Non-zero metrics in the last 30s        {"monito
ring": {"metrics": {"beat":{"cpu":{"system":{"ticks":31},"total":{"ticks":31,"value":31},"user":{"ticks":0}},"handles":{
"open":176},"info":{"ephemeral_id":"b7d27553-36f5-49a4-bb94-eb1f8c463bc4","uptime":{"ms":63771}},"memstats":{"gc_next":7
032592,"memory_alloc":3882616,"memory_total":12721784,"rss":53248},"runtime":{"goroutines":19}},"libbeat":{"config":{"mo
dule":{"running":0},"scans":3},"pipeline":{"clients":0,"events":{"active":0}}}}}}
2020-06-02T16:59:20.511+0200    DEBUG   [cfgfile]       cfgfile/reload.go:205   Scan for new config files
2020-06-02T16:59:30.556+0200    DEBUG   [cfgfile]       cfgfile/reload.go:205   Scan for new config files
2020-06-02T16:59:40.556+0200    DEBUG   [cfgfile]       cfgfile/reload.go:205   Scan for new config files
2020-06-02T16:59:43.615+0200    DEBUG   [service]       service/service.go:53   Received sigterm/sigint, stopping
2020-06-02T16:59:43.615+0200    DEBUG   [service]       service/service.go:64   Received svc stop/shutdown request
2020-06-02T16:59:43.615+0200    INFO    cfgfile/reload.go:201   Dynamic config reloader stopped
2020-06-02T16:59:43.615+0200    INFO    [monitoring]    log/log.go:153  Total non-zero metrics  {"monitoring": {"metrics
": {"beat":{"cpu":{"system":{"ticks":31,"time":{"ms":31}},"total":{"ticks":31,"time":{"ms":31},"value":31},"user":{"tick
s":0}},"handles":{"open":176},"info":{"ephemeral_id":"b7d27553-36f5-49a4-bb94-eb1f8c463bc4","uptime":{"ms":86878}},"mems
tats":{"gc_next":7032592,"memory_alloc":3977760,"memory_total":12816928,"rss":32452608},"runtime":{"goroutines":14}},"li
bbeat":{"config":{"module":{"running":0},"reloads":1,"scans":8},"output":{"type":"elasticsearch"},"pipeline":{"clients":
0,"events":{"active":0}}},"system":{"cpu":{"cores":4}}}}}
2020-06-02T16:59:43.615+0200    INFO    [monitoring]    log/log.go:154  Uptime: 1m26.8784409s
5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.