# Field.yml

**URL:** <https://discuss.elastic.co/t/field-yml/121539>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [February 26, 2018, 5:57pm UTC](https://discuss.elastic.co/t/field-yml/121539 "2018-02-26T17:57:03Z")\
**Posts on this page:** 19\
**Page:** 1

<div class="post-metadata">

**Author:** ![gongon](https://avatars.discourse-cdn.com/v4/letter/g/ecccb3/32.png) [@gongon](https://discuss.elastic.co/u/gongon)\
**Post date:** [February 26, 2018, 5:57pm UTC](https://discuss.elastic.co/t/field-yml/121539/1 "2018-02-26T17:57:03Z")

</div>

I've installed Filebeat on my mac with Homebrew; in the config folder i don't find the Field.yml .  
Could you helm me ?

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [February 27, 2018, 3:55am UTC](https://discuss.elastic.co/t/field-yml/121539/2 "2018-02-27T03:55:02Z")

</div>

Which version of Filebeat did you install? I remember it was missing in some older versions.

---

<div class="post-metadata">

**Author:** ![gongon](https://avatars.discourse-cdn.com/v4/letter/g/ecccb3/32.png) [@gongon](https://discuss.elastic.co/u/gongon)\
**Post date:** [February 27, 2018, 9:05am UTC](https://discuss.elastic.co/t/field-yml/121539/3 "2018-02-27T09:05:15Z")

</div>

a last 6.2.1

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [March 2, 2018, 1:34am UTC](https://discuss.elastic.co/t/field-yml/121539/4 "2018-03-02T01:34:16Z")

</div>

Hm, I just looked at the formula and it seems it's still not copied or this went lost somehow ☹

@tylerjl Perhaps you know more here?

---

<div class="post-metadata">

**Author:** ![tylerjl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tylerjl/32/44965_2.png) [@tylerjl](https://discuss.elastic.co/u/tylerjl)\
**Post date:** [March 5, 2018, 12:47am UTC](https://discuss.elastic.co/t/field-yml/121539/5 "2018-03-05T00:47:49Z")

</div>

Hey, it does indeed look like some Beats are missing the `fields.yml` file. I've [submitted a PR](https://github.com/Homebrew/homebrew-core/pull/24834) to the homebrew project to get things fixed for all Beats formulae.

---

<div class="post-metadata">

**Author:** ![gongon](https://avatars.discourse-cdn.com/v4/letter/g/ecccb3/32.png) [@gongon](https://discuss.elastic.co/u/gongon)\
**Post date:** [March 5, 2018, 8:18am UTC](https://discuss.elastic.co/t/field-yml/121539/6 "2018-03-05T08:18:33Z")

</div>

Thank you very much.Will I install again Filebeat to get Field.yml?

---

<div class="post-metadata">

**Author:** ![tylerjl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tylerjl/32/44965_2.png) [@tylerjl](https://discuss.elastic.co/u/tylerjl)\
**Post date:** [March 5, 2018, 7:44pm UTC](https://discuss.elastic.co/t/field-yml/121539/7 "2018-03-05T19:44:43Z")

</div>

@gongon once the changes are merged by the Homebrew project, you should be able to `brew reinstall filebeat` to get the necessary yaml files.

---

<div class="post-metadata">

**Author:** ![gongon](https://avatars.discourse-cdn.com/v4/letter/g/ecccb3/32.png) [@gongon](https://discuss.elastic.co/u/gongon)\
**Post date:** [March 6, 2018, 8:09am UTC](https://discuss.elastic.co/t/field-yml/121539/8 "2018-03-06T08:09:58Z")

</div>

OK Thank you very much

---

<div class="post-metadata">

**Author:** ![gongon](https://avatars.discourse-cdn.com/v4/letter/g/ecccb3/32.png) [@gongon](https://discuss.elastic.co/u/gongon)\
**Post date:** [March 15, 2018, 2:01pm UTC](https://discuss.elastic.co/t/field-yml/121539/9 "2018-03-15T14:01:42Z")

</div>

Hi! I have the same problem with the dashboard.Is there a relationship between the lack of the indextemplate?

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [March 16, 2018, 1:19pm UTC](https://discuss.elastic.co/t/field-yml/121539/10 "2018-03-16T13:19:49Z")

</div>

It seems the modules directories are copied to everything should work here. Can you share the error here?

---

<div class="post-metadata">

**Author:** ![gongon](https://avatars.discourse-cdn.com/v4/letter/g/ecccb3/32.png) [@gongon](https://discuss.elastic.co/u/gongon)\
**Post date:** [March 16, 2018, 2:21pm UTC](https://discuss.elastic.co/t/field-yml/121539/11 "2018-03-16T14:21:50Z")

</div>

Here a copy of the error  
Last login: Wed Mar 14 09:10:02 on console  
I3893-2:~ gongon$ cd /usr/local/Cellar/filebeat/6.2.1  
I3893-2:6.2.1 gongon$ filebeat setup --dashboards  
Exiting: Error importing Kibana dashboards: fail to import the dashboards in Kibana: Error importing directory /usr/local/Cellar/filebeat/6.2.1/kibana: No directory /usr/local/Cellar/filebeat/6.2.1/kibana/6

---

<div class="post-metadata">

**Author:** ![gongon](https://avatars.discourse-cdn.com/v4/letter/g/ecccb3/32.png) [@gongon](https://discuss.elastic.co/u/gongon)\
**Post date:** [March 16, 2018, 2:50pm UTC](https://discuss.elastic.co/t/field-yml/121539/12 "2018-03-16T14:50:14Z")

</div>

I can't run the module (Apache), I can't load the indextemplate of Filebeat

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [March 19, 2018, 7:53am UTC](https://discuss.elastic.co/t/field-yml/121539/13 "2018-03-19T07:53:23Z")

</div>

That doesn't look good. @tylerjl Can you also check that one?

---

<div class="post-metadata">

**Author:** ![tylerjl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tylerjl/32/44965_2.png) [@tylerjl](https://discuss.elastic.co/u/tylerjl)\
**Post date:** [March 19, 2018, 5:49pm UTC](https://discuss.elastic.co/t/field-yml/121539/14 "2018-03-19T17:49:12Z")

</div>

Yep, the formulae aren't installing the `kibana` config directory at the moment. I'll look at fixing it and update.

---

<div class="post-metadata">

**Author:** ![gongon](https://avatars.discourse-cdn.com/v4/letter/g/ecccb3/32.png) [@gongon](https://discuss.elastic.co/u/gongon)\
**Post date:** [March 20, 2018, 7:55am UTC](https://discuss.elastic.co/t/field-yml/121539/15 "2018-03-20T07:55:51Z")

</div>

OK.Thank you very much

---

<div class="post-metadata">

**Author:** ![tylerjl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tylerjl/32/44965_2.png) [@tylerjl](https://discuss.elastic.co/u/tylerjl)\
**Post date:** [March 21, 2018, 2:59pm UTC](https://discuss.elastic.co/t/field-yml/121539/16 "2018-03-21T14:59:25Z")

</div>

@gongon and @ruflin [the PR has been merged](https://github.com/Homebrew/homebrew-core/pull/25530), so all of the beats formulae in homebrew should be much more consistent and able to install dashboards/enable modules/etc. If you update homebrew and install the updated beat, things should look better. Please let us know if you encounter any additional problems.

---

<div class="post-metadata">

**Author:** ![gongon](https://avatars.discourse-cdn.com/v4/letter/g/ecccb3/32.png) [@gongon](https://discuss.elastic.co/u/gongon)\
**Post date:** [March 21, 2018, 4:13pm UTC](https://discuss.elastic.co/t/field-yml/121539/17 "2018-03-21T16:13:25Z")

</div>

Great! Thank you very much.  
Sure 😄 I am going to follow your advice. I am keeping informing you.

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [March 22, 2018, 1:31pm UTC](https://discuss.elastic.co/t/field-yml/121539/18 "2018-03-22T13:31:49Z")

</div>

@tylerjl Thanks for making this happen :elasticheart:

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 19, 2018, 1:31pm UTC](https://discuss.elastic.co/t/field-yml/121539/19 "2018-04-19T13:31:50Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
