# Filebeat 5.6.16 to 7.8.1 breaking

**URL:** https://discuss.elastic.co/t/filebeat-5-6-16-to-7-8-1-breaking/244422
**Category:** Beats
**Tags:** filebeat
**Created:** [August 10, 2020, 3:08pm UTC](https://discuss.elastic.co/t/filebeat-5-6-16-to-7-8-1-breaking/244422 "2020-08-10T15:08:49Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![kopacko](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kopacko/32/10733_2.png) [@kopacko](https://discuss.elastic.co/u/kopacko)
#### Post date: [August 10, 2020, 3:08pm UTC](https://discuss.elastic.co/t/filebeat-5-6-16-to-7-8-1-breaking/244422/1 "2020-08-10T15:08:49Z")

</div>

I attempted a migration on one of my Windows servers from filebeats 5.6.16 to 7.8.1. And got no service errors but was no longer receiving any file logs.

I noticed in the logs that connections to the Elasticsearch cluster were being denied.

My basic config is this:

```auto
    filebeat.prospectors:
    - input_type: log
      paths:
        - C:\xxxx\config\logs\*
    output.logstash:
      hosts: ["x.x.x.x:5046"]

```

I am going to attempt another migration during my next change window. But I did not understand what would cause it fail. Yet flipping back to 5.6.16 with this config, worked just fine. I know that **filebeat.prospectors** changed to **filebeats.inputs**.

Any thoughts as to what might have caused this?

---

<div class="post-metadata">

### Author: ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)
#### Post date: [August 10, 2020, 3:35pm UTC](https://discuss.elastic.co/t/filebeat-5-6-16-to-7-8-1-breaking/244422/2 "2020-08-10T15:35:36Z")

</div>

I see two issues:

- `prospectors` were renamed to `inputs`
- `input_type` was renamed to `type`

I think the following configuration will work:

```auto
filebeat.inputs:
- type: log
  paths:
    - C:\xxxx\config\logs\*
output.logstash:
  hosts: ["x.x.x.x:5046"]

```

Let me know if you still have problems after the changes in your configuration! It would be nice if you could attach debug logs to see what is the issue exactly.

---

<div class="post-metadata">

### Author: ![kopacko](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kopacko/32/10733_2.png) [@kopacko](https://discuss.elastic.co/u/kopacko)
#### Post date: [August 25, 2020, 1:35am UTC](https://discuss.elastic.co/t/filebeat-5-6-16-to-7-8-1-breaking/244422/3 "2020-08-25T01:35:51Z")

</div>

So I got a chance to try again over the weekend.

Did a fresh install, on a different computer all together and the service would not send any data. Some times it would start and some times it wouldn't.

It was very hit or miss. I installed Filebeat v5.5.16 without issue the first time around.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 22, 2020, 3:35am UTC](https://discuss.elastic.co/t/filebeat-5-6-16-to-7-8-1-breaking/244422/4 "2020-09-22T03:35:54Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
