# Filebeat-Apache Module- Nodata

**URL:** <https://discuss.elastic.co/t/filebeat-apache-module-nodata/314977>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [September 22, 2022, 10:29pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-nodata/314977 "2022-09-22T22:29:14Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![emmanuel\_stevens\_LED](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/emmanuel_stevens_led/32/107869_2.png) [@emmanuel\_stevens\_LED](https://discuss.elastic.co/u/emmanuel_stevens_LED)\
**Post date:** [September 22, 2022, 10:29pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-nodata/314977/1 "2022-09-22T22:29:14Z")

</div>

Hello,

I configure filebeat in my system, the probleme is, whaen i configure the modure system , i receive all datas and graphic, it is not the same for apache. We donot receive anaything

I have enable the module and configure the path

**- module: apache**  
\*\* # Access logs\*\*  
\*\* access:\*\*  
\*\* enabled: true\*\*

\*\* # Set custom paths for the log files. If left empty,\*\*  
\*\* # Filebeat will choose the paths depending on your OS.\*\*  
\*\* var.paths: ["/var/log/httpd/dispatcher\_access\_log"]\*\*

Still no datas, can i have some help please ?

---

<div class="post-metadata">

**Author:** ![Tetiana\_Kravchenko](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tetiana_kravchenko/32/102683_2.png) [@Tetiana\_Kravchenko](https://discuss.elastic.co/u/Tetiana_Kravchenko)\
**Post date:** [September 23, 2022, 3:54pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-nodata/314977/2 "2022-09-23T15:54:08Z")

</div>

Hi @emmanuel_stevens_LED

Does the file `/var/log/httpd/dispatcher_access_log` exist? Do you see any errors related to the apache module, to the defined file path when starting filebeat?

---

<div class="post-metadata">

**Author:** ![emmanuel\_stevens\_LED](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/emmanuel_stevens_led/32/107869_2.png) [@emmanuel\_stevens\_LED](https://discuss.elastic.co/u/emmanuel_stevens_LED)\
**Post date:** [September 23, 2022, 5:02pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-nodata/314977/3 "2022-09-23T17:02:50Z")

</div>

yes, the file existe and i see no error from filebeat. System module send his datas perfectly

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [September 23, 2022, 6:59pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-nodata/314977/4 "2022-09-23T18:59:25Z")

</div>

There are many possible reasons ....

What version are you on?

Did you enable the apache module?

`filebeat modules enable apache`

Did you run setup before starting filebeat?

`filebeat setup -e`

When you say you do not see the logs... Where are you looking Discover?

So your file has no extension?

`/var/log/httpd/dispatcher_access_log`

Are these common apache logs? or have they been customized?

In the filebeat logs you should see that that path... something like

```auto
2022-09-23T11:57:58.769-0700 INFO [input] log/input.go:171 Configured paths: [/usr/local/var/log/apache2/access_log*] {"input_id": "311cfe37-e4f4-4587-a387-885b78c57f6c"}
2022-09-23T11:57:58.770-0700 INFO [input] log/input.go:171 Configured paths: [/usr/local/var/log/apache2/error_log*] {"input_id": "847e93b7-2442-4c0c-a88a-063b761b095f"}

```

---

<div class="post-metadata">

**Author:** ![emmanuel\_stevens\_LED](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/emmanuel_stevens_led/32/107869_2.png) [@emmanuel\_stevens\_LED](https://discuss.elastic.co/u/emmanuel_stevens_LED)\
**Post date:** [October 12, 2022, 3:14pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-nodata/314977/5 "2022-10-12T15:14:51Z")

</div>

**What version are you on?**  
I am on version 8.3.3  
**Did you enable the apache module?**  
Yes, i did  
**Did you run setup before starting filebeat?**  
yes, i did  
**So your file has no extension?**  
exactly, it is an linux file

\*\*In the filebeat lo, i see the path :\*\*slight\_smile:

`Oct 12 10:49:14 prllgsdpr001 filebeat[1828153]: {"log.level":"debug","@timestamp":"2022-10-12T10:49:14.593-0400","log.logger":"processors","log.origin":{"file.name":"processing/processors.go","file.line":210},"message":"Publish event: {\n \"@timestamp\": \"2022-10-12T14:49:14.593Z\",\n \"@metadata\": {\n \"beat\": \"filebeat\",\n \"type\": \"_doc\",\n \"version\": \"8.3.3\",\n \"pipeline\": \"filebeat-8.3.3-apache-access-pipeline\"\n },\n \"message\": \"162.158.51.178 - - [12/Oct/2022:10:49:07 -0400] \\\"GET / HTTP/1.1\\\" 301 258\",\n \"input\": {\n \"type\": \"log\"\n },\n \"fileset\": {\n \"name\": \"access\"\n },\n \"ecs\": {\n \"version\": \"1.12.0\"\n },\n \"host\": {\n \"mac\": [\n \"00:50:56:8c:bf:cf\"\n],\n \"hostname\": \"Somehost\",\n \"architecture\": \"x86_64\",\n \"os\": {\n \"platform\": \"rhel\",\n \"version\": \"8.6 (Ootpa)\",\n \"family\": \"redhat\",\n \"name\": \"Red Hat Enterprise Linux\",\n \"kernel\": \"4.18.0-240.15.1.el8_3.x86_64\",\n \"codename\": \"Ootpa\",\n \"type\": \"linux\"\n },\n \"id\": \"d50e1f42ad1944a1a264a49359ba1832\",\n \"containerized\": false,\n \"ip\": [\n \"172.17.6.20\",\n \"fe80::250:56ff:fe8c:bfcf\"\n],\n \"name\": \"Somehost\"\n },\n \"agent\": {\n \"type\": \"filebeat\",\n \"version\": \"8.3.3\",\n \"ephemeral_id\": \"76456cf1-3eb5-4eca-9ae3-1aa486981d98\",\n \"id\": \"ade45ee9-44bb-4c9a-8681-bf66b293de33\",\n \"name\": \"Somehost\"\n },\n \"log\": {\n \"offset\": 47089131,\n \"file\": {\n \"path\": \"/var/log/httpd/dispatcher_access_log\"\n }\n },\n \"event\": {\n \"dataset\": \"apache.access\",\n \"module\": \"apache\"\n },\n \"service\": {\n \"type\": \"apache\"\n }\n}","service.name":"filebeat","ecs.version":"1.6.0"}`

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [October 12, 2022, 3:27pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-nodata/314977/6 "2022-10-12T15:27:56Z")

</div>

Please format your code / logs in the future using the `</>` button.

> [@emmanuel\_stevens\_LED](#):
>
> "offset": 47089131,\n "file": {\n "path": "/var/log/httpd/dispatcher\_access\_log"\n }\

Looks to me perhaps the file has already been read? Or is it constantly being appended to?

FIlebeat will only read a file once ... if you want to reload it you will need to clean out the data registry in the filebeat data path. Find that directory and clean it out... that will reset the registry.

Are there any other error messages in the filebeat logs?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 9, 2022, 5:28pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-nodata/314977/7 "2022-11-09T17:28:07Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
