# Fileabeat Netflow

**URL:** <https://discuss.elastic.co/t/fileabeat-netflow/220029>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [February 19, 2020, 4:35pm UTC](https://discuss.elastic.co/t/fileabeat-netflow/220029 "2020-02-19T16:35:14Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Uzzi](https://avatars.discourse-cdn.com/v4/letter/u/6a8cbe/32.png) [@Uzzi](https://discuss.elastic.co/u/Uzzi)\
**Post date:** [February 19, 2020, 4:35pm UTC](https://discuss.elastic.co/t/fileabeat-netflow/220029/1 "2020-02-19T16:35:14Z")

</div>

Hi, I'm tryng to enable nfow module on production. My filebeat.yml:

> filebeat.modules:
> 
> - module: wazuh  
> alerts:  
> enabled: true  
> archives:  
> enabled: false

> setup.template.json.enabled: true  
> setup.template.json.path: '/etc/filebeat/wazuh-template.json'  
> setup.template.json.name: 'wazuh'  
> setup.template.overwrite: true  
> setup.ilm.enabled: false

> #output.elasticsearch.hosts: ['[http://172.16.6.33:9200](http://172.16.6.33:9200)']  
> output.logstash.hosts: ["172.16.6.33:5000"]

Version: 7.4.2

Exiting: error loading config file: yaml: line 7: did not find expected key  
Feb 19 16:55:16 wazuh systemd[1]: filebeat.service: Main process exited, code=exited, status=1/FAILURE  
Feb 19 16:55:16 wazuh systemd[1]: filebeat.service: Failed with result 'exit-code'.

---

<div class="post-metadata">

**Author:** ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)\
**Post date:** [February 19, 2020, 5:50pm UTC](https://discuss.elastic.co/t/fileabeat-netflow/220029/2 "2020-02-19T17:50:38Z")

</div>

Can you post your complete Filebeat configuration, enclosed in ``` so the formatting/indentation is preserved? Also, what version of Filebeat are you running? Finally, can you post the entire Filebeat log from the time it starts running to the time it stops with the failure?

---

<div class="post-metadata">

**Author:** ![Uzzi](https://avatars.discourse-cdn.com/v4/letter/u/6a8cbe/32.png) [@Uzzi](https://discuss.elastic.co/u/Uzzi)\
**Post date:** [February 20, 2020, 10:05am UTC](https://discuss.elastic.co/t/fileabeat-netflow/220029/3 "2020-02-20T10:05:44Z")

</div>

Version: 7.4.2

Exiting: error loading config file: yaml: line 7: did not find expected key  
Feb 19 16:55:16 wazuh systemd[1]: filebeat.service: Main process exited, code=exited, status=1/FAILURE  
Feb 19 16:55:16 wazuh systemd[1]: filebeat.service: Failed with result 'exit-code'.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 19, 2020, 10:05am UTC](https://discuss.elastic.co/t/fileabeat-netflow/220029/4 "2020-03-19T10:05:47Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.