# Cisco.yml missing from filebeat

**URL:** https://discuss.elastic.co/t/cisco-yml-missing-from-filebeat/256561
**Category:** Beats
**Tags:** filebeat
**Created:** [November 24, 2020, 7:09pm UTC](https://discuss.elastic.co/t/cisco-yml-missing-from-filebeat/256561 "2020-11-24T19:09:07Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![dave.mc](https://avatars.discourse-cdn.com/v4/letter/d/d9b06d/32.png) [@dave.mc](https://discuss.elastic.co/u/dave.mc)
#### Post date: [November 24, 2020, 7:09pm UTC](https://discuss.elastic.co/t/cisco-yml-missing-from-filebeat/256561/1 "2020-11-24T19:09:07Z")

</div>

Attempting to set up a Cisco switch to send logs to Elastic, but Cisco.yml is missing from /etc/filebeat/modules.d folder. I'm asssuming I did something wrong in the setup, but I'm so new to ELK I don't know where to even look. Any suggestions? Thanks!

---

<div class="post-metadata">

### Author: ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)
#### Post date: [November 25, 2020, 2:16am UTC](https://discuss.elastic.co/t/cisco-yml-missing-from-filebeat/256561/2 "2020-11-25T02:16:00Z")

</div>

Hi @dave.mc, welcome to the Elastic community forums!

Could you tell us a bit more about how you installed Filebeat? Which Linux distribution are you running, exactly which command(s) did you use to install Filebeat, and what version of Filebeat have you installed?

Also, could you share the contents of your `/etc/filebeat/modules.d` folder please? That might provide some clues.

Thanks,

Shaunak

---

<div class="post-metadata">

### Author: ![dave.mc](https://avatars.discourse-cdn.com/v4/letter/d/d9b06d/32.png) [@dave.mc](https://discuss.elastic.co/u/dave.mc)
#### Post date: [November 25, 2020, 3:04am UTC](https://discuss.elastic.co/t/cisco-yml-missing-from-filebeat/256561/3 "2020-11-25T03:04:45Z")

</div>

Hey Shaunak, running Debian 10 here. Filebeat 7.1.0 (I would assume, due to the file I installed from).

Installation - sudo curl -L -0 [https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.1.0-amd64.deb](https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.1.0-amd64.deb),  
then sudo dpkg -i filebeat-7.1.0-amd64.deb.

Modules.d folder  
apache.yml.disabled  
auditd.yml.disabled  
elasticsearch.yml  
haproxy.yml.disabled  
icinga.yml.disabled  
iis.yml.disabled  
iptables.yml.disabled  
kafka.yml.disabled  
kibana.yml  
logstash.yml  
mongodb.yml.disabled  
mysql.yml.disabled  
nginx.yml  
osquery.yml.disabled  
postgresql.yml.disabled  
redis.yml.disabled  
santa.yml.disabled  
suricata.yml.disabled  
system.yml  
traefik.yml.disabled  
zeek.yml.disabled

---

<div class="post-metadata">

### Author: ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)
#### Post date: [November 25, 2020, 5:27am UTC](https://discuss.elastic.co/t/cisco-yml-missing-from-filebeat/256561/4 "2020-11-25T05:27:06Z")

</div>

Ah, this is because the `cisco` Filebeat module was not available in 7.1.0! It was only available starting 7.2.0.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 23, 2020, 7:27am UTC](https://discuss.elastic.co/t/cisco-yml-missing-from-filebeat/256561/5 "2020-12-23T07:27:10Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
