# Filebeat logging data from disabled modules

**URL:** <https://discuss.elastic.co/t/filebeat-logging-data-from-disabled-modules/192312>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [July 25, 2019, 7:44pm UTC](https://discuss.elastic.co/t/filebeat-logging-data-from-disabled-modules/192312 "2019-07-25T19:44:49Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![johnc1231](https://avatars.discourse-cdn.com/v4/letter/j/f05b48/32.png) [@johnc1231](https://discuss.elastic.co/u/johnc1231)\
**Post date:** [July 25, 2019, 7:44pm UTC](https://discuss.elastic.co/t/filebeat-logging-data-from-disabled-modules/192312/1 "2019-07-25T19:44:50Z")

</div>

I am running filebeat as a DaemonSet on my Kubernetes cluster. The following is my configuration file:

```auto
filebeat.modules:
filebeat.inputs:
- type: container
  paths:
    - /var/log/containers/*.log
  processors:
    - add_kubernetes_metadata:
        in_cluster: true
        host: ${NODE_NAME}
        matchers:
        - logs_path:
            logs_path: "/var/log/containers/"
processors:
  - decode_json_fields:
        fields: ["message"]
        process_array: false
        max_depth: 1
        target: "json-message"
        overwrite_keys: false
  - add_cloud_metadata:

output.elasticsearch:
  hosts: ['${ELASTICSEARCH_HOST:elasticsearch}:${ELASTICSEARCH_PORT:9200}']
  username: ${ELASTICSEARCH_USERNAME}
  password: ${ELASTICSEARCH_PASSWORD}
setup.ilm.enabled: true
setup.ilm.rollover_alias: "filebeat"
setup.ilm.pattern: "{now/d}-000001"
setup.ilm.overwrite: true

```

Despite the fact that I have no modules specified, I'm somehow seeing every module's output enabled when I look at the filebeat elasticsearch index in kibana. Like I see fields for apache and cisco modules which I do not care about. Any idea why this would happen?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 22, 2019, 7:44pm UTC](https://discuss.elastic.co/t/filebeat-logging-data-from-disabled-modules/192312/2 "2019-08-22T19:44:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.