# Filebeat "zeek" module integration

**URL:** <https://discuss.elastic.co/t/filebeat-zeek-module-integration/213598>\
**Category:** Beats\
**Tags:** beats-module, filebeat\
**Created:** [January 2, 2020, 4:03pm UTC](https://discuss.elastic.co/t/filebeat-zeek-module-integration/213598 "2020-01-02T16:03:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![aurquia](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aurquia/32/47144_2.png) [@aurquia](https://discuss.elastic.co/u/aurquia)\
**Post date:** [January 2, 2020, 4:03pm UTC](https://discuss.elastic.co/t/filebeat-zeek-module-integration/213598/1 "2020-01-02T16:03:56Z")

</div>

Hello,

I've a 7.5.1 Elastic Stack environment (Elasticsearch, Logstash and Kibana running in the same node (zeek master 10.0.2.2)) and another node where is running Filebeat (zeek logger 10.0.2.5).

I've followed the steps of Zeek module installation, I didn't get any problem until I try to verify the module status ("Check data" button).

I get the message "No data has been received from this module yet"

Elasticsearch indexs:

 ![2020-01-02](https://us1.discourse-cdn.com/elastic/original/3X/c/f/cf2e2a78a1da4fbbb69f31a95d3338e6289ae268.png)

I've activated xpack security in Elasticsearch and defined passwords to all built-in users. So, I'm using "elastic" user.

Someone can explain me how I can check what's going wrong?

Thanks in advance,  
Ander.

---

<div class="post-metadata">

**Author:** ![aurquia](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aurquia/32/47144_2.png) [@aurquia](https://discuss.elastic.co/u/aurquia)\
**Post date:** [January 2, 2020, 6:27pm UTC](https://discuss.elastic.co/t/filebeat-zeek-module-integration/213598/2 "2020-01-02T18:27:01Z")

</div>

![health](https://us1.discourse-cdn.com/elastic/original/3X/c/0/c04b851e55c55ed5ea6e8ceadab0bf653ca03f9c.png) ![kibana](https://us1.discourse-cdn.com/elastic/original/3X/1/f/1f34c153f7f1785433014bfbc43f97952beeb814.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 30, 2020, 6:27pm UTC](https://discuss.elastic.co/t/filebeat-zeek-module-integration/213598/3 "2020-01-30T18:27:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.