# Filebeat decode\_xml processor missing

**URL:** <https://discuss.elastic.co/t/filebeat-decode-xml-processor-missing/268915>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 31, 2021, 1:38pm UTC](https://discuss.elastic.co/t/filebeat-decode-xml-processor-missing/268915 "2021-03-31T13:38:54Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Francisco\_Peralta\_Gu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/francisco_peralta_gu/32/83575_2.png) [@Francisco\_Peralta\_Gu](https://discuss.elastic.co/u/Francisco_Peralta_Gu)\
**Post date:** [March 31, 2021, 1:38pm UTC](https://discuss.elastic.co/t/filebeat-decode-xml-processor-missing/268915/1 "2021-03-31T13:38:55Z")

</div>

Hi.  
I'm facing issues trying to configure decode\_xml processor in filebeat version 7.11.

The error is the following:

```auto
    Failed to start crawler: starting input failed: Error while initializing input: the processor action decode_xml does not exist. Valid actions: drop_event, include_fields, add_cloud_metadata, add_locale, convert, add_fields, add_tags, dissect, fingerprint, rate_limit, decode_base64_field, add_observer_metadata, add_id, script, add_cloudfoundry_metadata, add_labels, add_host_metadata, copy_fields, dns, registered_domain, add_docker_metadata, decode_csv_fields, decode_cef, add_process_metadata, extract_array, timestamp, decompress_gzip_field, community_id, urldecode, add_kubernetes_metadata, detect_mime_type, rename, drop_fields, replace, truncate_fields, add_network_direction, decode_json_fields
    github.com/elastic/beats/v7/libbeat/processors.New
            /go/src/github.com/elastic/beats/libbeat/processors/processor.go:106

```

My configuration is as follows:

```auto
filebeat.inputs:
    - type: log
      paths:
        - /<PATH>
      processors:
        - decode_xml:
            field: message
            target_field: "xml"
            overwrite_keys: true

```

....

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [March 31, 2021, 2:06pm UTC](https://discuss.elastic.co/t/filebeat-decode-xml-processor-missing/268915/2 "2021-03-31T14:06:57Z")

</div>

Hi @Francisco_Peralta_Gu , try 7.12, that's when it was introduced.

The docs for 7.11 do not mention decode\_xml. [Define processors | Filebeat Reference [7.11] | Elastic](https://www.elastic.co/guide/en/beats/filebeat/7.11/defining-processors.html#processors)

---

<div class="post-metadata">

**Author:** ![Francisco\_Peralta\_Gu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/francisco_peralta_gu/32/83575_2.png) [@Francisco\_Peralta\_Gu](https://discuss.elastic.co/u/Francisco_Peralta_Gu)\
**Post date:** [April 5, 2021, 10:45am UTC](https://discuss.elastic.co/t/filebeat-decode-xml-processor-missing/268915/4 "2021-04-05T10:45:54Z")

</div>

Thank you @andrewkroh .  
Trying with 7.12 version I am getting the following error:

```auto
 instance/beat.go:971 Exiting: Failed to start crawler: starting input failed: Error while initializing input: missing fields option in filebeat.inputs.0.processors.0.decode_xml
Exiting: Failed to start crawler: starting input failed: Error while initializing input: missing fields option in filebeat.inputs.0.processors.0.decode_xml

```

This is the configuration of my input

```auto
   filebeat.inputs:
    - type: log
      paths:
        - /dumps/**
      processors:
        - decode_xml:
            field: message
            target_field: xml
            ignore_missing: true
            ignore_failure: true

```

---

<div class="post-metadata">

**Author:** ![Francisco\_Peralta\_Gu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/francisco_peralta_gu/32/83575_2.png) [@Francisco\_Peralta\_Gu](https://discuss.elastic.co/u/Francisco_Peralta_Gu)\
**Post date:** [April 6, 2021, 7:05am UTC](https://discuss.elastic.co/t/filebeat-decode-xml-processor-missing/268915/5 "2021-04-06T07:05:25Z")

</div>

Once I activated the debug mode I cannot see more info that I include below:

```auto
2021-04-06T07:02:44.851Z	INFO	[monitoring]	log/log.go:152	Total non-zero metrics	{"monitoring": {"metrics": {"beat":{"cgroup":{"cpu":{"cfs":{"period":{"us":100000},"quota":{"us":400000}},"id":"crio-68f84aa9cf563e928781488cefeae8870012bea8879bb84507933164a1a2f420.scope","stats":{"periods":2}},"cpuacct":{"id":"crio-68f84aa9cf563e928781488cefeae8870012bea8879bb84507933164a1a2f420.scope","total":{"ns":180222497}},"memory":{"id":"crio-68f84aa9cf563e928781488cefeae8870012bea8879bb84507933164a1a2f420.scope","mem":{"limit":{"bytes":1073741824},"usage":{"bytes":44670976}}}},"cpu":{"system":{"ticks":50,"time":{"ms":56}},"total":{"ticks":140,"time":{"ms":149},"value":140},"user":{"ticks":90,"time":{"ms":93}}},"handles":{"limit":{"hard":1048576,"soft":1048576},"open":8},"info":{"ephemeral_id":"1030b8cd-8c29-463a-bd66-5df3c6973349","uptime":{"ms":86}},"memstats":{"gc_next":18425648,"memory_alloc":16343096,"memory_sys":76366848,"memory_total":52962720,"rss":84951040},"runtime":{"goroutines":11}},"filebeat":{"harvester":...
2021-04-06T07:02:44.851Z	INFO	[monitoring]	log/log.go:153	Uptime: 87.107058ms
2021-04-06T07:02:44.851Z	INFO	[monitoring]	log/log.go:130	Stopping metrics logging.
2021-04-06T07:02:44.851Z	INFO	instance/beat.go:474	filebeat stopped.
2021-04-06T07:02:44.851Z	ERROR	instance/beat.go:971	Exiting: Failed to start crawler: starting input failed: Error while initializing input: missing fields option in filebeat.inputs.0.processors.0.decode_xml
Exiting: Failed to start crawler: starting input failed: Error while initializing input: missing fields option in filebeat.inputs.0.processors.0.decode_xml

```

Please could you tell me if there is there any configuration mistake, bug or anything else?

---

<div class="post-metadata">

**Author:** ![Francisco\_Peralta\_Gu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/francisco_peralta_gu/32/83575_2.png) [@Francisco\_Peralta\_Gu](https://discuss.elastic.co/u/Francisco_Peralta_Gu)\
**Post date:** [April 26, 2021, 7:55am UTC](https://discuss.elastic.co/t/filebeat-decode-xml-processor-missing/268915/6 "2021-04-26T07:55:38Z")

</div>

Hi.  
Please we need information about if the configuration is applied right or if this is an issue of the module decode\_xml.

Thank you!

---

<div class="post-metadata">

**Author:** ![Marius\_Iversen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_iversen/32/68988_2.png) [@Marius\_Iversen](https://discuss.elastic.co/u/Marius_Iversen)\
**Post date:** [April 26, 2021, 4:03pm UTC](https://discuss.elastic.co/t/filebeat-decode-xml-processor-missing/268915/7 "2021-04-26T16:03:43Z")

</div>

Hello @Francisco_Peralta_Gu , this has confirmed to be a bug, and will be resolved in 7.13 and 7.12.2 releases unless something changes.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 24, 2021, 6:04pm UTC](https://discuss.elastic.co/t/filebeat-decode-xml-processor-missing/268915/8 "2021-05-24T18:04:06Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
