Filebeat failed to start after adding add_host_metadata

Hi All,

We are trying to send logs using filebeat and we added the add_host_metadata processor to our beats yml files.

But it not working on Windows Server 2016 64-bit servers and below is the system details,

Any idea's on how to solve this?

The added part:

processors:
- add_host_metadata: ~

When adding this to the yml file of filebeat the service crashes and the following error is logged:

PS C:\ProgramData\filebeat-6.3.2-windows-x86_64> .\filebeat.exe -c .\filebeat.yml -e -d "*"
2019-04-18T12:44:57.921Z INFO instance/beat.go:492 Home path: [C:\ProgramData\filebeat-6.3.2-windows-x86_64] Config path: [C:\ProgramData\filebeat-6.3.2-windows-x86_64] Data path:
[C:\ProgramData\filebeat-6.3.2-windows-x86_64\data] Logs path: [C:\ProgramData\filebeat-6.3.2-windows-x86_64\logs]
2019-04-18T12:44:57.991Z DEBUG [beat] instance/beat.go:519 Beat metadata path: C:\ProgramData\filebeat-6.3.2-windows-x86_64\data\meta.json
2019-04-18T12:44:57.992Z INFO instance/beat.go:499 Beat UUID: 1f9eae26-52c5-4340-9861-401b83536402
2019-04-18T12:44:57.992Z INFO [beat] instance/beat.go:716 Beat info {"system_info": {"beat": {"path": {"config": "C:\ProgramData\filebeat-6.3.2-windows-x86_64", "data": "
C:\ProgramData\filebeat-6.3.2-windows-x86_64\data", "home": "C:\ProgramData\filebeat-6.3.2-windows-x86_64", "logs": "C:\ProgramData\filebeat-6.3.2-windows-x86_64\logs"}, "type": "filebeat", "uuid": "1f9eae26-52c5-4340-9861-401b83536402"}}}
2019-04-18T12:44:57.992Z INFO [beat] instance/beat.go:725 Build info {"system_info": {"build": {"commit": "45a9a9e1561b6c540e94211ebe03d18abcacae55", "libbeat": "6.3.2", "time": "2018-07-20T04:17:39.000Z", "version": "6.3.2"}}}
2019-04-18T12:44:57.993Z INFO [beat] instance/beat.go:728 Go runtime info {"system_info": {"go":{"os":"windows","arch":"amd64","max_procs":4,"version":"go1.9.4"}}}
2019-04-18T12:44:58.000Z INFO instance/beat.go:225 Setup Beat: filebeat; Version: 6.3.2
2019-04-18T12:44:58.000Z DEBUG [beat] instance/beat.go:242 Initializing output plugins
2019-04-18T12:44:58.011Z INFO instance/beat.go:275 filebeat stopped.
2019-04-18T12:44:58.011Z ERROR instance/beat.go:691 Exiting: error initializing publisher: error initializing processors: 1 error: GetFileVersionInfoSize failed: The system cannot find the file specified.
Exiting: error initializing publisher: error initializing processors: 1 error: GetFileVersionInfoSize failed: The system cannot find the file specified.

Note:- I have tried other versions of filebeat like 6.4.0, 6.5.4 and I am getting the same error

Please help us to resolve this issue.

Thanks,
Ganeshbabu R

It looks like you filed a bug for this on GitHub: https://github.com/elastic/beats/issues/11864. That's perfect, thanks!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.