# Elasticsearch Engineering Observability - What do I do on the .YAML menu screen in the terminal? **URL:** \ **Category:** Elastic Training\ **Created:** [December 7, 2021, 2:41pm UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133 "2021-12-07T14:41:36Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![Brendanluvsdata](https://avatars.discourse-cdn.com/v4/letter/b/c4cdca/32.png) [@Brendanluvsdata](https://discuss.elastic.co/u/Brendanluvsdata)\ **Post date:** [December 7, 2021, 2:41pm UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133/1 "2021-12-07T14:41:37Z")
It comes up with a menu (shown in the first picture). The lab doesn't tell you anything about this and then goes on to tell you to do more code (second picture). What do I do with the menu after I type: "nano filebeat.yml"? ![Terminal Window Lab](https://us1.discourse-cdn.com/elastic/original/3X/9/6/969e2bd1678b77ffb9e37dd5600eb771880a90e8.jpeg) ![Lab 3.1 - Filebeat](https://us1.discourse-cdn.com/elastic/original/3X/d/1/d1886f0aff7ec8096eb835d626d076390f94b05a.jpeg) ---
**Author:** ![abdon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abdon/32/9195_2.png) [@abdon](https://discuss.elastic.co/u/abdon)\ **Post date:** [December 7, 2021, 4:01pm UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133/2 "2021-12-07T16:01:07Z")
Hi Brendan, Nano is a text editor that you can use in a Linux terminal. It's not Elastic specific. There are guides on the internet, [like this one for example](https://linuxize.com/post/how-to-use-nano-text-editor/), that explain how to use it. If you're more comfortable with another text editor, like vi or emacs, feel free to use those. In this case, you're being asked to make changes to the filebeat.yml file. Step 3 tells you exactly what changes you need to make. Hope this helps! Abdon ---
**Author:** ![Brendanluvsdata](https://avatars.discourse-cdn.com/v4/letter/b/c4cdca/32.png) [@Brendanluvsdata](https://discuss.elastic.co/u/Brendanluvsdata)\ **Post date:** [December 10, 2021, 7:47pm UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133/3 "2021-12-10T19:47:14Z")
How do I save the edits to the heartbeat.yml file after I edit it in the terminal? ---
**Author:** ![Brendanluvsdata](https://avatars.discourse-cdn.com/v4/letter/b/c4cdca/32.png) [@Brendanluvsdata](https://discuss.elastic.co/u/Brendanluvsdata)\ **Post date:** [December 10, 2021, 8:35pm UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133/4 "2021-12-10T20:35:43Z")
I figured it out.... "CTRL O". Another question. I accidently forgot the "s" in "https" in the .YML. Heartbeat shows but it is down. How do I fix that? Can I just edit and will it save overtop? Do I have to do ./heartbeat setup -e again? Because after I saved the edited file, I get an error when I try to run that. Thank you. Brendan ---
**Author:** ![abdon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abdon/32/9195_2.png) [@abdon](https://discuss.elastic.co/u/abdon)\ **Post date:** [December 13, 2021, 8:42am UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133/5 "2021-12-13T08:42:30Z")
Yes, when you save the file, it will overwrite the previous version. You do not need to run "setup" again, after editing - you can just restart Filebeat. Can you share the error? It will help us troubleshoot the problem. One common error with yml files is caused by their whitespace sensitivity. So when you see two spaces at the beginning of a line in an exercise, make sure those end up in the file. ---
**Author:** ![Brendanluvsdata](https://avatars.discourse-cdn.com/v4/letter/b/c4cdca/32.png) [@Brendanluvsdata](https://discuss.elastic.co/u/Brendanluvsdata)\ **Post date:** [December 13, 2021, 3:30pm UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133/6 "2021-12-13T15:30:03Z")
Abdon, What happened was I was using "CTRL O" to write to the file. What this was doing was creating a new file with a different name every time I did it. I'm now using "CRTL X" and it is working fine overwriting. Now, I'm trying to add the tcp monitor. I'm adding it exactly the way the lab answer shows and it is down. I even tried adding in the certificate, user name, and password. It is still down. Brendan ![TCP Error](https://us1.discourse-cdn.com/elastic/original/3X/8/7/877aafedea2f570c163cdaf9cb9695b79c5be5b6.jpeg) Brendan ---
**Author:** ![abdon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abdon/32/9195_2.png) [@abdon](https://discuss.elastic.co/u/abdon)\ **Post date:** [December 13, 2021, 3:57pm UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133/7 "2021-12-13T15:57:25Z")
YML is a whitespace sensitive format (unfortunately), so spaces are important. Take a close look at the lab exercises - some configuration lines start with two spaces. Make sure you put those spaces in your heartbeat.yml file too. Another thing is that there seem to be some settings here (like the `ssl` settings and the `username` and `password`) that don't belong in a tcp monitor configuration. All you need to put in the file is what you see in the lab answer. ---
**Author:** ![Brendanluvsdata](https://avatars.discourse-cdn.com/v4/letter/b/c4cdca/32.png) [@Brendanluvsdata](https://discuss.elastic.co/u/Brendanluvsdata)\ **Post date:** [December 13, 2021, 3:59pm UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133/8 "2021-12-13T15:59:50Z")
Abdon, Thanks. Yeah, I just added in the ssl because I didn't know why it wasn't working. The issue turned out to be that I had typed "-type" instead of "- type". It was exactly that. I didn't add a space after "-". Thanks! ---
**Author:** ![Brendanluvsdata](https://avatars.discourse-cdn.com/v4/letter/b/c4cdca/32.png) [@Brendanluvsdata](https://discuss.elastic.co/u/Brendanluvsdata)\ **Post date:** [December 13, 2021, 5:07pm UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133/9 "2021-12-13T17:07:24Z")
Two questions: 1. After I run heartbeat with "./heartbeat &", how do you stop that process? 2. I entered the [Elastic.co](http://Elastic.co) Homepage monitoring exactly how it was shown in the lab and it didn't work. Also tried to add ssl lines and still doesn't work. The other 4 monitors before that one do work though. ![Elastic 1](https://us1.discourse-cdn.com/elastic/original/3X/8/e/8ef96ef9344bb1411d70c417aae860c8a624fadb.jpeg) ![Elastic 2](https://us1.discourse-cdn.com/elastic/original/3X/8/3/83f016c686534a16f8a0b7eb322dc38449aa8398.jpeg) ---
**Author:** ![abdon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abdon/32/9195_2.png) [@abdon](https://discuss.elastic.co/u/abdon)\ **Post date:** [December 13, 2021, 5:22pm UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133/10 "2021-12-13T17:22:24Z")
Enter the following command to stop any running Heartbeat processes: ```auto killall heartbeat ``` The [elastic.co](http://elastic.co) monitor only pings once every 10 minutes. Maybe you need to wait a bit longer to see those pings show up? ---
**Author:** ![Brendanluvsdata](https://avatars.discourse-cdn.com/v4/letter/b/c4cdca/32.png) [@Brendanluvsdata](https://discuss.elastic.co/u/Brendanluvsdata)\ **Post date:** [December 13, 2021, 5:32pm UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133/11 "2021-12-13T17:32:24Z")
Abdon, Thank you for the "kill" command. I had to kill the process, edit the .YML, then do "./heartbeat setup -e", then "./heartbeat -e". Now all 5 are showing. I know I shouldn't have to do the setup again, as I have "reload.enabled: true" for the monitor config settings in the YML. The most interesting thing is when I type "nano heatbeat", it opens with a bunch of gibberish. I have to type "nano heartbeat.yml" and then I can edit the yml file. I've checked the directory for heartbeat and all the files are as they should be......shoulder shrug...... ---
**Author:** ![abdon](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abdon/32/9195_2.png) [@abdon](https://discuss.elastic.co/u/abdon)\ **Post date:** [December 14, 2021, 9:23am UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133/12 "2021-12-14T09:23:06Z")
When you type `nano filebeat` you're using the Nano text editor to open the Filebeat executable (the actual Heartbeat application). In a text editor, an executable like that looks like gibberish. The `.yml` extension is important - the configuration file is called `filebeat.yml`. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 13, 2022, 9:23am UTC](https://discuss.elastic.co/t/elasticsearch-engineering-observability-what-do-i-do-on-the-yaml-menu-screen-in-the-terminal/291133/13 "2022-01-13T09:23:23Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.