# Filebeat doesn't providing event fields (event.name,event.module...) doesnt

**URL:** <https://discuss.elastic.co/t/filebeat-doesnt-providing-event-fields-event-name-event-module-doesnt/223825>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 16, 2020, 9:54pm UTC](https://discuss.elastic.co/t/filebeat-doesnt-providing-event-fields-event-name-event-module-doesnt/223825 "2020-03-16T21:54:47Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Burga](https://avatars.discourse-cdn.com/v4/letter/b/9d8465/32.png) [@Burga](https://discuss.elastic.co/u/Burga)\
**Post date:** [March 16, 2020, 9:54pm UTC](https://discuss.elastic.co/t/filebeat-doesnt-providing-event-fields-event-name-event-module-doesnt/223825/1 "2020-03-16T21:54:47Z")

</div>

HI , I'm using filebeat sending logs to the logstash but i can't see event fields like

event.name,event.module

example

```auto
{
 "input" => {
 "type" => "log"
 },
 "agent" => {
 "hostname" => "solrc-stg1",
 "id" => "69b413db-221a-4362-8ac8-624092b11811",
 "ephemeral_id" => "c222c99f-5737-4d4f-8295-89f6fae34007",
 "type" => "filebeat",
 "version" => "7.6.1"
 },
 "@timestamp" => 2020-03-16T21:12:07.806Z,
 "ecs" => {
"version" => "1.4.0"

 "log" => {
 "file" => {
 "path" => "/var/log/messages"
 },
 "offset" => 6218088
 },
 "@metadata" => {
 "ip_address" => "192.168.127.230",
 "version" => "7.6.1",
 "type" => "_doc",
 "beat" => "filebeat",
 "index" => "other_data"
 },
 "@version" => "1",
 "host" => {
 "hostname" => "solrc-stg1",
 "os" => {
 "kernel" => "3.10.0-693.el7.x86_64",
 "codename" => "Core",
 "name" => "CentOS Linux",
 "family" => "redhat",
 "version" => "7 (Core)",
 "platform" => "centos"
 },
 "containerized" => false,
 "name" => "solrc-stg1",
 "id" => "139d5f1344b040e8a80b3da09ac47779",
 "architecture" => "x86_64"
 },
 "message" => "Mar 16 23:12:01 solrc-stg1 systemd: Started Session 22716 of user devuser.",
 "tags" => [
 [0] "beats_input_codec_plain_applied"

```

why filebeat is not providing those event fields ?

Thanks is advance.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 13, 2020, 9:55pm UTC](https://discuss.elastic.co/t/filebeat-doesnt-providing-event-fields-event-name-event-module-doesnt/223825/2 "2020-04-13T21:55:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.