# Filebeat version 8.15.1 \[logging problem/question\]

**URL:** <https://discuss.elastic.co/t/filebeat-version-8-15-1-logging-problem-question/366992>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [September 23, 2024, 7:39pm UTC](https://discuss.elastic.co/t/filebeat-version-8-15-1-logging-problem-question/366992 "2024-09-23T19:39:09Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![robertos1232](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/robertos1232/32/137816_2.png) [@robertos1232](https://discuss.elastic.co/u/robertos1232)\
**Post date:** [September 23, 2024, 7:39pm UTC](https://discuss.elastic.co/t/filebeat-version-8-15-1-logging-problem-question/366992/1 "2024-09-23T19:39:09Z")

</div>

Hello Guys!,

I'm messaging you because I am confused about filebeat and monitoring.

My config:

```auto
logging.level: info
logging.to_files: true
logging.to_syslog: false
logging.to_stderr: false
logging.metrics.enabled: false
logging.files:
  path: /var/log/filebeat
  name: filebeat
  keepfiles: 7
  permissions: 0640

```

In version: 7.17 there was an option to change JSON output to false.

In version 8.15 I do not see this parameter, is there another way to turn off JSON output?

Also, filebeat is creating a log in version 8.15 like: filebeat+{date}+.ndjson is there a way to just create logname: "filebeat.log"?

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [September 23, 2024, 7:55pm UTC](https://discuss.elastic.co/t/filebeat-version-8-15-1-logging-problem-question/366992/2 "2024-09-23T19:55:24Z")

</div>

> [@robertos1232](#):
>
> In version 8.15 I do not see this parameter, is there another way to turn off JSON output?
> 
> Also, filebeat is creating a log in version 8.15 like: filebeat+{date}+.ndjson is there a way to just create logname: "filebeat.log"?

I don't think none of those things are possible anymore.

This is one of the [breaking changes](https://www.elastic.co/guide/en/beats/libbeat/current/breaking-changes-8.0.html#_beats_logs_are_now_ecs_compliant) from 7.X to 8.X.

---

<div class="post-metadata">

**Author:** ![robertos1232](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/robertos1232/32/137816_2.png) [@robertos1232](https://discuss.elastic.co/u/robertos1232)\
**Post date:** [September 23, 2024, 8:26pm UTC](https://discuss.elastic.co/t/filebeat-version-8-15-1-logging-problem-question/366992/3 "2024-09-23T20:26:15Z")

</div>

Thank you very much for the provided information.  
We will downgrade to version 7.17.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [September 24, 2024, 3:17am UTC](https://discuss.elastic.co/t/filebeat-version-8-15-1-logging-problem-question/366992/4 "2024-09-24T03:17:23Z")

</div>

But why?  
What problem are you trying to solve ?

---

<div class="post-metadata">

**Author:** ![robertos1232](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/robertos1232/32/137816_2.png) [@robertos1232](https://discuss.elastic.co/u/robertos1232)\
**Post date:** [September 24, 2024, 8:55am UTC](https://discuss.elastic.co/t/filebeat-version-8-15-1-logging-problem-question/366992/5 "2024-09-24T08:55:50Z")

</div>

Hello,

I hope this message finds you well.  
I would like to request the ability to configure the creation of logs and specify the log names.

I understand that it may be convenient for developers to have a standardized approach for the elkstack, but I prefer to have the option to configure the output log names.

Thank you for your attention to this matter.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [September 24, 2024, 12:16pm UTC](https://discuss.elastic.co/t/filebeat-version-8-15-1-logging-problem-question/366992/6 "2024-09-24T12:16:57Z")

</div>

> [@robertos1232](#):
>
> I prefer to have the option to configure the output log names.

Still... The question is "why?". What problem are you trying to solve?

Downgrading to 7.17 and being blocked for the next upgrades because of this does not make sense to me...So I'm wondering if there is an actual use case for this.