# Filebeat input types log and filestream metadata for file path/name differ
**URL:** https://discuss.elastic.co/t/filebeat-input-types-log-and-filestream-metadata-for-file-path-name-differ/281713
**Category:** Beats
**Tags:** filebeat
**Created:** [August 17, 2021, 3:21pm UTC](https://discuss.elastic.co/t/filebeat-input-types-log-and-filestream-metadata-for-file-path-name-differ/281713 "2021-08-17T15:21:41Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@Michael\_Savettiere](https://discuss.elastic.co/u/Michael_Savettiere)
#### Post date: [August 17, 2021, 3:21pm UTC](https://discuss.elastic.co/t/filebeat-input-types-log-and-filestream-metadata-for-file-path-name-differ/281713/1 "2021-08-17T15:21:41Z")
I have been using beats input type log, but with the 7.14.0 release I noticed that the filestream input type is supposed to be an improvement to the log input type. I noticed that the event meta data differs between the two.
For example, input type log displays the file name and path as:
"log" =\> {
"offset" =\> 0,
"file" =\> {
"path" =\> "/tmp/mikes3.log"
}
},
whilst input type filestream displays as:
"log" =\> {
"path" =\> "/tmp/mikes3.log",
"offset" =\> 180
}
Basically schema has changed from [log][file][path] to [log][path].
Is this intentional for filestream or perhaps a miss?
To me this does not fit the ECS schema for log.file.path as per [ECS fields | Filebeat Reference [7.14] | Elastic](https://www.elastic.co/guide/en/beats/filebeat/current/exported-fields-ecs.html)
I have written a logstash output plugin that parses this data. This plugin has now broken due to the changes in the event meta data schema for what I would perceive as a replacement for the input type log.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 14, 2021, 5:21pm UTC](https://discuss.elastic.co/t/filebeat-input-types-log-and-filestream-metadata-for-file-path-name-differ/281713/2 "2021-09-14T17:21:42Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.