# Filebeat fields missing

**URL:** https://discuss.elastic.co/t/filebeat-fields-missing/266375
**Category:** Logstash
**Created:** [March 5, 2021, 1:17pm UTC](https://discuss.elastic.co/t/filebeat-fields-missing/266375 "2021-03-05T13:17:26Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![bzak](https://avatars.discourse-cdn.com/v4/letter/b/a88e57/32.png) [@bzak](https://discuss.elastic.co/u/bzak)
#### Post date: [March 5, 2021, 1:17pm UTC](https://discuss.elastic.co/t/filebeat-fields-missing/266375/1 "2021-03-05T13:17:26Z")

</div>

When I installed filebeat in a linux server I enabled nginx module. In Discover, I can see all the nginx fields but they are ALL empty. My configuration is as follows:  
input {  
beats:...  
}  
filter {  
...  
}  
output {  
elasticsearch ....  
}  
Any help will be greatly appreciated.

---

<div class="post-metadata">

### Author: ![bzak](https://avatars.discourse-cdn.com/v4/letter/b/a88e57/32.png) [@bzak](https://discuss.elastic.co/u/bzak)
#### Post date: [March 8, 2021, 12:32pm UTC](https://discuss.elastic.co/t/filebeat-fields-missing/266375/2 "2021-03-08T12:32:45Z")

</div>

It seems like adding the filter in logstash solved the problem. [Use Logstash pipelines for parsing | Logstash Reference [7.11] | Elastic](https://www.elastic.co/guide/en/logstash/current/logstash-config-for-filebeat-modules.html)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 5, 2021, 12:33pm UTC](https://discuss.elastic.co/t/filebeat-fields-missing/266375/3 "2021-04-05T12:33:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
