# Filebeat data extra Fields not populating in raw logs

**URL:** <https://discuss.elastic.co/t/filebeat-data-extra-fields-not-populating-in-raw-logs/259033>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [December 17, 2020, 8:31pm UTC](https://discuss.elastic.co/t/filebeat-data-extra-fields-not-populating-in-raw-logs/259033 "2020-12-17T20:31:26Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![jkaufmanlr](https://avatars.discourse-cdn.com/v4/letter/j/2bfe46/32.png) [@jkaufmanlr](https://discuss.elastic.co/u/jkaufmanlr)\
**Post date:** [December 17, 2020, 8:31pm UTC](https://discuss.elastic.co/t/filebeat-data-extra-fields-not-populating-in-raw-logs/259033/1 "2020-12-17T20:31:26Z")

</div>

There are some additional log variables that I want ingesting into my logstash. I have the logs ingesting and can see the Event Hub Beats just fine. But these specific values that I will be able to spot within event hub do not show up at all.

Is there some special checkbox or radio button that needs to get toggled or some additional setting in either the eventhubbeat or filebeat that I need in order to retrieve even more data out?

---

<div class="post-metadata">

**Author:** ![Kaiyan\_Sheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kaiyan_sheng/32/38247_2.png) [@Kaiyan\_Sheng](https://discuss.elastic.co/u/Kaiyan_Sheng)\
**Post date:** [December 18, 2020, 1:56am UTC](https://discuss.elastic.co/t/filebeat-data-extra-fields-not-populating-in-raw-logs/259033/2 "2020-12-18T01:56:54Z")

</div>

Hi! Could you list some of the specific values that are missing please?

---

<div class="post-metadata">

**Author:** ![jkaufmanlr](https://avatars.discourse-cdn.com/v4/letter/j/2bfe46/32.png) [@jkaufmanlr](https://discuss.elastic.co/u/jkaufmanlr)\
**Post date:** [December 21, 2020, 5:50pm UTC](https://discuss.elastic.co/t/filebeat-data-extra-fields-not-populating-in-raw-logs/259033/3 "2020-12-21T17:50:04Z")

</div>

Thank you for your response, sadly a new issue cropped up. Originally I would not see the proper data coming through at all, the uuids were not matching and the timestamps were not either. Now I get this:

```auto

PUT https://storageName.blob.core.windows.net/hubName/0?timeout=61
Authorization: REDACTED

RESPONSE Status: 409 The specified blob already exists.
 
ERROR:
-> github.com/Azure/azure-storage-blob-go/azblob.newStorageError, /go/pkg/mod/github.com/!azure/azure-storage-blob-go@v0.8.0/azblob/zc_storage_error.go:42
===== RESPONSE ERROR (ServiceCode=BlobAlreadyExists) =====
Description=The specified blob already exists.
RequestId: . . .
Time:2020-12-21T17:42:57.5087896Z, Details:
Code: BlobAlreadyExists
PUT https://storageName.blob.core.windows.net/hubName/0?timeout=61
Authorization: REDACTED

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 18, 2021, 7:50pm UTC](https://discuss.elastic.co/t/filebeat-data-extra-fields-not-populating-in-raw-logs/259033/4 "2021-01-18T19:50:07Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.