# Filebeat - processors parameters not being applied to all logs

**URL:** https://discuss.elastic.co/t/filebeat-processors-parameters-not-being-applied-to-all-logs/318206
**Category:** Beats
**Tags:** docker, filebeat
**Created:** [November 4, 2022, 3:47pm UTC](https://discuss.elastic.co/t/filebeat-processors-parameters-not-being-applied-to-all-logs/318206 "2022-11-04T15:47:53Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![godisnemus](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/godisnemus/32/112957_2.png) [@godisnemus](https://discuss.elastic.co/u/godisnemus)
#### Post date: [November 4, 2022, 3:47pm UTC](https://discuss.elastic.co/t/filebeat-processors-parameters-not-being-applied-to-all-logs/318206/1 "2022-11-04T15:47:53Z")

</div>

Fairly new to this. I'm trying to understand why some of our Filebeat logs are not being subject to the parameters defined in "processors". It is my understanding that the processor parameters should be applied to all data collected by Filebeat.

For example, when consulting airflow-log-1, I see the processor parameters (add\_fields, add\_kubernetes\_metadata, add\_cloud\_metadata, add\_host\_metadata) have been applied. But when consulting airflow-log-2, all the processor parameters have **not** been applied. Note that there a difference of milliseconds in the timestamp of both of those logs.

Here's the relevant section of my values' file:

```auto
daemonset:
  filebeatConfig:
    filebeat.yml: |
      filebeat.autodiscover:
        providers:
          - type: kubernetes
            templates:
              - config:
                  - type: container
                    paths:
                      - /var/log/containers/*-${data.kubernetes.container.id}.log
                    exclude_lines: ["^\\s+[\\-`('.|_]"]
      filebeat.inputs:
      - type: container
        paths:
          - /etc/beat.yml
          - /usr/share/filebeat/data
          - /var/lib/docker/containers
          - /var/log/containers
          - /var/log/containers/*.log
          - /var/log/pods
          - /var/run/secrets/kubernetes.io/serviceaccount
        processors:
          - add_id: ~
          - add_fields:
              target: "application"
              fields:
                name: "doggo"
                cluster: "doggo-prod"
                environment: "production"
          - add_kubernetes_metadata:
              host: ${NODE_NAME}
              matchers:
              - logs_path:
                  logs_path: "/var/log/containers/"
          - add_cloud_metadata: {}
          - add_host_metadata: {}

```

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 2, 2022, 5:48pm UTC](https://discuss.elastic.co/t/filebeat-processors-parameters-not-being-applied-to-all-logs/318206/2 "2022-12-02T17:48:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
