# Filebeat yml config issue
**URL:** https://discuss.elastic.co/t/filebeat-yml-config-issue/349360
**Category:** Beats
**Created:** [December 14, 2023, 11:42am UTC](https://discuss.elastic.co/t/filebeat-yml-config-issue/349360 "2023-12-14T11:42:37Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@Satsan](https://discuss.elastic.co/u/Satsan)
#### Post date: [December 14, 2023, 11:42am UTC](https://discuss.elastic.co/t/filebeat-yml-config-issue/349360/1 "2023-12-14T11:42:37Z")
The index for my Filebeat YAML configuration is not appearing in the Kibana index pattern. This issue arose with a new Filebeat setup on the Linux server.
I configured Filebeat and created a YAML configuration file. I verified the syntax using a YAML checker, and it's correct. Additionally, I used the command "filebeat test config -c /xxx/xxx/xx" to confirm that the configuration format is fine.
I manually created an index with the command "curl -XPUT 'httpxxxxxxx:port/aaaaaa\_bbb'" and checked the indices using "curl -XGET 'httpxxxxxx:port/\_cat/indices,'" receiving the expected output. However, in Kibana, I couldn't locate the index pattern or set the timestamp. Despite trying various methods, none have been successful. I'm uncertain about the error, and I seek assistance in identifying the issue.
Log files are stored in the .out format, such as "xxxxxxxx\_20230419\_132134.out."
I appreciate any help in resolving this issue within the Elastic community.
###################### Filebeat Configuration #########################
filebeat.inputs:
- type: log
id: my-logs
enabled: true
paths:
- /xxxxx/logs/\*.out # Update the file extension to .out
filebeat.config.modules:
path: ${path.config}/modules.d/\*.yml
reload.enabled: false
setup.template.settings:
index.number\_of\_shards: 1
output.elasticsearch:
hosts: ["xxxxxxxxxxxx:9200"]
indices:
- index: "aaaaaa\_abc01\_xyz"
when.contains:
log.file.path: "/xxxxxxxx/logs/"
processors:
- add\_host\_metadata:
when.not.contains.tags: forwarded
- add\_cloud\_metadata: ~
- add\_docker\_metadata: ~
- add\_kubernetes\_metadata: ~
logging.level: debug
---
### Author:  [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)
#### Post date: [December 27, 2023, 10:43pm UTC](https://discuss.elastic.co/t/filebeat-yml-config-issue/349360/2 "2023-12-27T22:43:27Z")
After you start filebeat, what shows up in your systemctl logs for filebeat? there should be some hints there if the data is ingested or not. Also you do not need to create the index yourself, filebeat will do it.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 24, 2024, 10:43pm UTC](https://discuss.elastic.co/t/filebeat-yml-config-issue/349360/3 "2024-01-24T22:43:54Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.