# External IPs - Kibana Dashboard - Version 7.9.1

**URL:** <https://discuss.elastic.co/t/external-ips-kibana-dashboard-version-7-9-1/255337>\
**Category:** Kibana\
**Created:** [November 13, 2020, 12:06pm UTC](https://discuss.elastic.co/t/external-ips-kibana-dashboard-version-7-9-1/255337 "2020-11-13T12:06:56Z")\
**Posts on this page:** 7\
**Page:** 2

<div class="post-metadata">

**Author:** ![krinfra](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krinfra/32/76054_2.png) [@krinfra](https://discuss.elastic.co/u/krinfra)\
**Post date:** [November 19, 2020, 10:56am UTC](https://discuss.elastic.co/t/external-ips-kibana-dashboard-version-7-9-1/255337/24 "2020-11-19T10:56:47Z")

</div>

Morning.

The module haproxy is enable.

```auto
cat haproxy.yml
# Module: haproxy
# Docs: https://www.elastic.co/guide/en/beats/filebeat/7.9/filebeat-module-haproxy.html

- module: haproxy
  # All logs
  log:
    enabled: true

    # Set which input to use between syslog (default) or file.
    var.iput: "file"
    #["/srv/syslog/10.138.68.10/2020/*/*.log"]

    # Set custom paths for the log files. If left empty,
    # Filebeat will choose the paths depending on your OS.
    var.paths: ["/srv/syslog/10.138.68.10/2020/*/*.log"]

```

Filebeat sending the data directly to Elasticsearch. I am not using Logstash.

---

<div class="post-metadata">

**Author:** ![mattkime](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mattkime/32/43522_2.png) [@mattkime](https://discuss.elastic.co/u/mattkime)\
**Post date:** [November 19, 2020, 5:04pm UTC](https://discuss.elastic.co/t/external-ips-kibana-dashboard-version-7-9-1/255337/25 "2020-11-19T17:04:22Z")

</div>

[https://www.elastic.co/guide/en/beats/filebeat/master/exported-fields-haproxy.html](https://www.elastic.co/guide/en/beats/filebeat/master/exported-fields-haproxy.html) - shows the fields you should have available. Do you see `source.address` in your left sidebar field list?

---

<div class="post-metadata">

**Author:** ![krinfra](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krinfra/32/76054_2.png) [@krinfra](https://discuss.elastic.co/u/krinfra)\
**Post date:** [November 19, 2020, 6:18pm UTC](https://discuss.elastic.co/t/external-ips-kibana-dashboard-version-7-9-1/255337/26 "2020-11-19T18:18:27Z")

</div>

Only this:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/8/0894b46c359faef780b68bddf56e26bceca15a5e.png)

---

<div class="post-metadata">

**Author:** ![krinfra](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krinfra/32/76054_2.png) [@krinfra](https://discuss.elastic.co/u/krinfra)\
**Post date:** [November 19, 2020, 6:23pm UTC](https://discuss.elastic.co/t/external-ips-kibana-dashboard-version-7-9-1/255337/27 "2020-11-19T18:23:40Z")

</div>

But I have this:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/3/2/32413dbac6540a9170f00cd7802f6a5cc32d1587.png)

---

<div class="post-metadata">

**Author:** ![krinfra](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/krinfra/32/76054_2.png) [@krinfra](https://discuss.elastic.co/u/krinfra)\
**Post date:** [November 19, 2020, 6:27pm UTC](https://discuss.elastic.co/t/external-ips-kibana-dashboard-version-7-9-1/255337/28 "2020-11-19T18:27:16Z")

</div>

Filebeat index \> Discover \> Search Field: **source**

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/a/4ae373ae2650bba774fa8ef13bfbc853ccac4519.png)

---

<div class="post-metadata">

**Author:** ![mattkime](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mattkime/32/43522_2.png) [@mattkime](https://discuss.elastic.co/u/mattkime)\
**Post date:** [November 19, 2020, 6:45pm UTC](https://discuss.elastic.co/t/external-ips-kibana-dashboard-version-7-9-1/255337/29 "2020-11-19T18:45:55Z")

</div>

What if you do a search for `source.ip : * ` or `source.address : * ` - I wonder if you have some docs without values.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 17, 2020, 6:46pm UTC](https://discuss.elastic.co/t/external-ips-kibana-dashboard-version-7-9-1/255337/30 "2020-12-17T18:46:01Z")

</div>

Closed on December 17, 2020, 6:46pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

[Previous page](https://discuss.elastic.co/t/external-ips-kibana-dashboard-version-7-9-1/255337.md?page=1)