# Filebeat harvesting only its own logs not other service on Nomad Cluster

**URL:** <https://discuss.elastic.co/t/filebeat-harvesting-only-its-own-logs-not-other-service-on-nomad-cluster/302125>\
**Category:** Beats\
**Tags:** elastic-stack-monitoring, docker, filebeat\
**Created:** [April 11, 2022, 3:25pm UTC](https://discuss.elastic.co/t/filebeat-harvesting-only-its-own-logs-not-other-service-on-nomad-cluster/302125 "2022-04-11T15:25:08Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Uzmasaman\_Chanderki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/uzmasaman_chanderki/32/102746_2.png) [@Uzmasaman\_Chanderki](https://discuss.elastic.co/u/Uzmasaman_Chanderki)\
**Post date:** [April 11, 2022, 3:25pm UTC](https://discuss.elastic.co/t/filebeat-harvesting-only-its-own-logs-not-other-service-on-nomad-cluster/302125/1 "2022-04-11T15:25:08Z")

</div>

I have filebeat running on Nomad cluster. It is only sending its own logs to the central server. There are other services running too but its unable to harvest their logs. Can anyone suggest what could be the problem?  
This is my filebeat.yml

```auto
job "filebeat" {
  datacenters = ["dc"]

  type = "system"
  update {
    min_healthy_time = "10s"
    healthy_deadline = "5m"
    progress_deadline = "10m"
    auto_revert = true
  }
  
  group "monitoring" {
    task "filebeat" {
      driver = "docker"

      config {
        image = "docker.elastic.co/beats/filebeat:7.10.2"
        args = [
          "-c", "/local/filebeat.yml",
          "--path.data", "/alloc/data/filebeat",
          "--path.logs", "/alloc/logs",
        ]
        mount {
          type = "bind"
          source = "local/filebeat.yml"
          target = "/usr/share/filebeat/filebeat.yml"
          readonly = true  
        }
      } 
      template {
        data = <<template
  filebeat.inputs:
    - paths:
        - /alloc/logs/*stdout.[0-9]*
# exclude_files: ['\.fifo$']  
      type: log
      scan_frequency: 1m
# fields_under_root: true
# fields:
# app: ${NOMAD_JOB_NAME}
    
    - paths:
        - /alloc/logs/*stderr.[0-9]*
# exclude_files: ['\.fifo$']  
      type: log
      scan_frequency: 1m
# fields_under_root: true
# fields:
# app: ${NOMAD_JOB_NAME}
    
    - paths:
        - /alloc/logs/filebeat
# exclude_files: ['\.fifo$']  
      type: log
      scan_frequency: 1m
# fields_under_root: true
# fields:
# app: ${NOMAD_JOB_NAME}
      
      encoding: utf-8    
      backoff: 1s
      close_eof: false
      close_inactive: 5m
      close_removed: true

      filebeat.registry.path: ${path.data}/registry
      filebeat.registry.file_permissions: 0600
      filebeat.registry.flush: 0s

  output.logstash:
    hosts: ["IP:5044"]

  logging.level: debug
    
      template
      destination = "local/filebeat.yml"
      } 
    }
  }
}

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 9, 2022, 5:25pm UTC](https://discuss.elastic.co/t/filebeat-harvesting-only-its-own-logs-not-other-service-on-nomad-cluster/302125/2 "2022-05-09T17:25:50Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.