# Filebeat modules and inputs

**URL:** <https://discuss.elastic.co/t/filebeat-modules-and-inputs/288412>\
**Category:** Beats\
**Tags:** beats-module\
**Created:** [November 4, 2021, 1:41pm UTC](https://discuss.elastic.co/t/filebeat-modules-and-inputs/288412 "2021-11-04T13:41:11Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![MalfuncEddie](https://avatars.discourse-cdn.com/v4/letter/m/3da27b/32.png) [@MalfuncEddie](https://discuss.elastic.co/u/MalfuncEddie)\
**Post date:** [November 4, 2021, 1:41pm UTC](https://discuss.elastic.co/t/filebeat-modules-and-inputs/288412/1 "2021-11-04T13:41:12Z")

</div>

Hi,

I'm a bit confused how modules work or if what I am trying to do is even possible.  
I got logs from a mssql instance that logs to an eventhub in azure. If I configure the filebeat agent to read the event hub it is send to elastic it just post the json as the message not parsed into fields.

I don't seem to find good documentation how to configure a different input than var.paths and change it to an eventhub input  
log:  
enabled: true  
# Set custom paths for the log files. If left empty,  
# Filebeat will choose the paths depending on your OS.  
#var.paths:

Any one that has experience with input plugins in modules or a guide hoe it should work?

---

<div class="post-metadata">

**Author:** ![legoguy1000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/legoguy1000/32/54301_2.png) [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\
**Post date:** [November 5, 2021, 12:27pm UTC](https://discuss.elastic.co/t/filebeat-modules-and-inputs/288412/2 "2021-11-05T12:27:16Z")

</div>

If u want to override the input of a module, just set `input: xxxx` in the config and whatever other configs u need for that input to function.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 3, 2021, 2:27pm UTC](https://discuss.elastic.co/t/filebeat-modules-and-inputs/288412/3 "2021-12-03T14:27:43Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.