# Filebeat monitoring **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [May 30, 2018, 10:09am UTC](https://discuss.elastic.co/t/filebeat-monitoring/133852 "2018-05-30T10:09:25Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![ashok9177](https://avatars.discourse-cdn.com/v4/letter/a/edb3f5/32.png) [@ashok9177](https://discuss.elastic.co/u/ashok9177)\ **Post date:** [May 30, 2018, 10:09am UTC](https://discuss.elastic.co/t/filebeat-monitoring/133852/1 "2018-05-30T10:09:25Z")
Hello, below is my filebeat configuration, getting an error **Exiting: more than one namespace configured accessing config** ``` # filebeat ``` filebeat.prospectors: - type: log paths: - /opt/id/logs/\* fields: component: idr multiline.pattern: '^[[:space:]]' multiline.negate: false multiline.match: after registry\_file: /opt/beat/registry fields\_under\_root: true logging: level: info to\_files: true files: path: /opt/id/logs name: beat.log rotateeverybytes: 10485760 # 10 MB keepfiles: 2 xpack.monitoring: enabled: true elasticsearch: hosts: ["[http://10.2.34:9200](http://10.2.34:9200)"] username: elastic password: password output.logstash: hosts: ["elkhost"] ssl.certificate\_authorities: - certs/ca.crt ---
**Author:** ![harshbajaj16](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/harshbajaj16/32/44970_2.png) [@harshbajaj16](https://discuss.elastic.co/u/harshbajaj16)\ **Post date:** [May 30, 2018, 11:35am UTC](https://discuss.elastic.co/t/filebeat-monitoring/133852/2 "2018-05-30T11:35:17Z")
Hi @ashok9177, i've checked your config file and found you have enabled both the o/p section i.e. **elasticsearch** and **logstash** but we can configure only one o/p section at a time. please disable one o/p section and restart the service and let me know if you are still getting this error. Regards, ---
**Author:** ![ashok9177](https://avatars.discourse-cdn.com/v4/letter/a/edb3f5/32.png) [@ashok9177](https://discuss.elastic.co/u/ashok9177)\ **Post date:** [May 30, 2018, 11:38am UTC](https://discuss.elastic.co/t/filebeat-monitoring/133852/3 "2018-05-30T11:38:59Z")
but i want monitor filebeat hosts and need to send logs to logstash to apply grok filter , in this case what can i do ? i think we can not monitor filebeats with logstash right? ---
**Author:** ![harshbajaj16](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/harshbajaj16/32/44970_2.png) [@harshbajaj16](https://discuss.elastic.co/u/harshbajaj16)\ **Post date:** [May 30, 2018, 11:47am UTC](https://discuss.elastic.co/t/filebeat-monitoring/133852/4 "2018-05-30T11:47:05Z")
Hi, i didn't get you more please find below comments. **Query 1:** > [@](#): > > send logs to logstash to apply grok filter for this please enable only logstash o/p section and disable elasticsearch o/p means comments below line. > [@](#): > > elasticsearch: > hosts: ["[http://10.2.34:9200](http://10.2.34:9200)"] > username: elastic > password: password **Query 2:** > [@](#): > > we can not monitor filebeats with logstash righ i'm not able to understand but if you are asking about config the logstash o/p then we can configure logstash o/p or please explain bit more so that i can understand and provide solution. regards, ---
**Author:** ![ashok9177](https://avatars.discourse-cdn.com/v4/letter/a/edb3f5/32.png) [@ashok9177](https://discuss.elastic.co/u/ashok9177)\ **Post date:** [May 30, 2018, 12:11pm UTC](https://discuss.elastic.co/t/filebeat-monitoring/133852/5 "2018-05-30T12:11:37Z")
I should configure logstash output as well as monitoring filebeat nodes also how can I achieve this? if I configure like below mentioned, getting error **Exiting: No monitoring reporter configured** ``` xpack.monitoring: enabled: true output.logstash: hosts: ["elkhost"] ssl.certificate_authorities: - certs/ca.crt ``` ---
**Author:** ![harshbajaj16](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/harshbajaj16/32/44970_2.png) [@harshbajaj16](https://discuss.elastic.co/u/harshbajaj16)\ **Post date:** [May 31, 2018, 4:55am UTC](https://discuss.elastic.co/t/filebeat-monitoring/133852/6 "2018-05-31T04:55:11Z")
Hi @ashok9177, The error **"more than one namespace configured"** is not there now which was mentioned earlier. And below error is related to X-pack monitoring. > [@](#): > > **Exiting: No monitoring reporter configured** for this i've checked the documentation of filebeat where clearly mentioned \>\> **"Add the xpack.monitoring settings in the Filebeat configuration file. If you configured Elasticsearch output and you want to use the same Elasticsearch production cluster and credentials"** \<\< It means we can configure X-pack monitoring in filebeat with elasticsearch only. Please find below links for your reference and let me know if you need any help from my side. > **[Monitor Filebeat | Filebeat Reference \[8.11\] | Elastic](https://www.elastic.co/guide/en/beats/filebeat/current/monitoring.html#monitoring)** Please do let me know in case you have any query. Regards, ---
**Author:** ![ashok9177](https://avatars.discourse-cdn.com/v4/letter/a/edb3f5/32.png) [@ashok9177](https://discuss.elastic.co/u/ashok9177)\ **Post date:** [May 31, 2018, 5:09am UTC](https://discuss.elastic.co/t/filebeat-monitoring/133852/7 "2018-05-31T05:09:24Z")
Hello Harsh , Thanks for your help I appreciate that. I followed the same procedure which is in elk document, and I am configuring logs output to Logstash and filebeat monitoring metrics to elasticsearch node, you can see that in the beginning post, but initially, I was getting an error **Exiting: more than one namespace configured accessing config** but i configured only one output ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 28, 2018, 5:09am UTC](https://discuss.elastic.co/t/filebeat-monitoring/133852/8 "2018-06-28T05:09:33Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.