# Filebeat traefik access log into elk

**URL:** <https://discuss.elastic.co/t/filebeat-traefik-access-log-into-elk/272824>\
**Category:** Beats\
**Tags:** beats-module, filebeat\
**Created:** [May 12, 2021, 3:25pm UTC](https://discuss.elastic.co/t/filebeat-traefik-access-log-into-elk/272824 "2021-05-12T15:25:37Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Enrico\_Gherardo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/enrico_gherardo/32/78300_2.png) [@Enrico\_Gherardo](https://discuss.elastic.co/u/Enrico_Gherardo)\
**Post date:** [May 12, 2021, 3:25pm UTC](https://discuss.elastic.co/t/filebeat-traefik-access-log-into-elk/272824/1 "2021-05-12T15:25:37Z")

</div>

Hello,  
I'm just starting to use filebeat 7.12 and I'm having problems sending traefik access log to elk.  
I was able to send the json log to elk with this snippet in the main config filebeat.yml :

```auto
filebeat.inputs:
- type: log
  enabled: true
  paths:
  - /tank/volumes/traefik/logs/access.log 
  json.keys_under_root: true
  json.add_error_key: true

```

But I need to setup this only in the traefik module.  
I tried to config this in modules.d/traefik.yml :

```auto
- module: traefik
  access:
    input:
    - type: log
      enabled: true
      paths:
      - /tank/volumes/traefik/logs/access.log
      json.keys_under_root: true
      json.add_error_key: true

```

But filebeat does nothing and doesn't show errors in the log :

```auto
2021-05-12T17:06:18.507+0200	INFO	cfgfile/reload.go:164	Config reloader started
2021-05-12T17:06:28.510+0200	INFO	log/input.go:157	Configured paths: [/var/log/traefik/access.log*]
2021-05-12T17:06:28.510+0200	INFO	eslegclient/connection.go:99	elasticsearch url: https://xxx.yyy.zzz
2021-05-12T17:06:28.527+0200	INFO	[esclientleg]	eslegclient/connection.go:314	Attempting to connect to Elasticsearch version 7.12.0

```

Also filebeat test config answers OK.

Is it possible do this ?  
Any suggestions ?

Thanks for your help  
Enrico

---

<div class="post-metadata">

**Author:** ![legoguy1000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/legoguy1000/32/54301_2.png) [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\
**Post date:** [May 15, 2021, 12:40pm UTC](https://discuss.elastic.co/t/filebeat-traefik-access-log-into-elk/272824/2 "2021-05-15T12:40:26Z")

</div>

To use the modules you shouldn't configure `filebeat.inputs`. Also I wouldn't modify the module configs except for the path. Can you show your `filebeat.yml` and the full log output?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 12, 2021, 12:40pm UTC](https://discuss.elastic.co/t/filebeat-traefik-access-log-into-elk/272824/3 "2021-06-12T12:40:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.