# Filebeats + nginx problem

**URL:** <https://discuss.elastic.co/t/filebeats-nginx-problem/141952>\
**Category:** Beats\
**Created:** [July 27, 2018, 2:06pm UTC](https://discuss.elastic.co/t/filebeats-nginx-problem/141952 "2018-07-27T14:06:11Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![incls](https://avatars.discourse-cdn.com/v4/letter/i/9d8465/32.png) [@incls](https://discuss.elastic.co/u/incls)\
**Post date:** [July 27, 2018, 2:06pm UTC](https://discuss.elastic.co/t/filebeats-nginx-problem/141952/1 "2018-07-27T14:06:11Z")

</div>

Hello,

Im new in ELK and i want run that concept:

Nginx -\> logstash -\> Elastic -\> Kibana  
(Standard ELK)

But when i try config all i have that problem:

When i run:

filebeat setup -e:

```
2018-07-27T13:58:10.146Z	ERROR	instance/beat.go:691	Exiting: Error getting config for fileset nginx/access: Error interpreting the template of the input: template: text:3:22: executing "text" at <.paths>: range can't iterate over /var/log/nginx/access.log
Exiting: Error getting config for fileset nginx/access: Error interpreting the template of the input: template: text:3:22: executing "text" at <.paths>: range can't iterate over /var/log/nginx/access.log

```

Thats is my nginx.yml from modules.d

> - module: nginx

And my logstash config:  
input {  
beats {  
port =\> 5400  
}  
}

```
filter {
 grok {
   match => ["message" , "%{COMBINEDAPACHELOG}+%{GREEDYDATA:extra_fields}"]
   overwrite => ["message"]
 }
 mutate {
   convert => ["response", "integer"]
   convert => ["bytes", "integer"]
   convert => ["responsetime", "float"]
 }
 geoip {
   source => "clientip"
   target => "geoip"
   add_tag => ["nginx-geoip"]
 }
 date {
   match => ["timestamp" , "dd/MMM/YYYY:HH:mm:ss Z"]
   remove_field => ["timestamp"]
 }
 useragent {
   source => "agent"
 }
}

output {
 elasticsearch {
   hosts => ["xxx.xxx.xxx.xxx:9200"]
   index => "weblogs-%{+YYYY.MM.dd}"
   document_type => "nginx_logs"
 }
 stdout { codec => rubydebug }
}

```

Someone can help please?

---

<div class="post-metadata">

**Author:** ![Charaf\_Ahmed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/charaf_ahmed/32/30467_2.png) [@Charaf\_Ahmed](https://discuss.elastic.co/u/Charaf_Ahmed)\
**Post date:** [July 27, 2018, 2:29pm UTC](https://discuss.elastic.co/t/filebeats-nginx-problem/141952/2 "2018-07-27T14:29:33Z")

</div>

be sure you have enabled the ngnix module

```
./filebeat modules enable nginx

```

[link inspiration](https://www.elastic.co/guide/en/logstash/current/filebeat-modules.html)

---

<div class="post-metadata">

**Author:** ![incls](https://avatars.discourse-cdn.com/v4/letter/i/9d8465/32.png) [@incls](https://discuss.elastic.co/u/incls)\
**Post date:** [July 27, 2018, 2:34pm UTC](https://discuss.elastic.co/t/filebeats-nginx-problem/141952/3 "2018-07-27T14:34:03Z")

</div>

Thanks for answer!

Yeah i have enabled nginx module:  
Enabled:  
nginx

Disabled:  
apache2  
auditd  
icinga  
iis  
kafka  
logstash  
mongodb  
mysql  
osquery  
postgresql  
redis  
system  
traefik

---

<div class="post-metadata">

**Author:** ![Charaf\_Ahmed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/charaf_ahmed/32/30467_2.png) [@Charaf\_Ahmed](https://discuss.elastic.co/u/Charaf_Ahmed)\
**Post date:** [July 27, 2018, 2:37pm UTC](https://discuss.elastic.co/t/filebeats-nginx-problem/141952/4 "2018-07-27T14:37:13Z")

</div>

```
./filebeat -e
```

---

<div class="post-metadata">

**Author:** ![incls](https://avatars.discourse-cdn.com/v4/letter/i/9d8465/32.png) [@incls](https://discuss.elastic.co/u/incls)\
**Post date:** [July 27, 2018, 2:51pm UTC](https://discuss.elastic.co/t/filebeats-nginx-problem/141952/5 "2018-07-27T14:51:47Z")

</div>

`filebeat -e`

2018-07-27T14:51:01.054Z ERROR instance/beat.go:691 Exiting: Error getting config for fileset nginx/error: Error interpreting the template of the input: template: text:3:22: executing "text" at \<.paths\>: range can't iterate over /var/log/nginx/error.log  
Exiting: Error getting config for fileset nginx/error: Error interpreting the template of the input: template: text:3:22: executing "text" at \<.paths\>: range can't iterate over /var/log/nginx/error.log

Did you maybe have another suggest/idea? 😕

---

<div class="post-metadata">

**Author:** ![Charaf\_Ahmed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/charaf_ahmed/32/30467_2.png) [@Charaf\_Ahmed](https://discuss.elastic.co/u/Charaf_Ahmed)\
**Post date:** [July 27, 2018, 2:57pm UTC](https://discuss.elastic.co/t/filebeats-nginx-problem/141952/6 "2018-07-27T14:57:35Z")

</div>

```
- module: nginx
  access:
      enabled: true
      var.paths: ["/var/log/nginx/access.log"]
  error:
      enabled: true
      var.paths: ["/var/log/nginx/error.log"]
```

---

<div class="post-metadata">

**Author:** ![incls](https://avatars.discourse-cdn.com/v4/letter/i/9d8465/32.png) [@incls](https://discuss.elastic.co/u/incls)\
**Post date:** [July 27, 2018, 3:14pm UTC](https://discuss.elastic.co/t/filebeats-nginx-problem/141952/7 "2018-07-27T15:14:43Z")

</div>

Thanks for another idea. I change nginx.yml like that you send and i see nothing - maybe filebeat work and i must wait a while.

When i get a any output i send that here 🙂

---

<div class="post-metadata">

**Author:** ![Charaf\_Ahmed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/charaf_ahmed/32/30467_2.png) [@Charaf\_Ahmed](https://discuss.elastic.co/u/Charaf_Ahmed)\
**Post date:** [July 27, 2018, 3:18pm UTC](https://discuss.elastic.co/t/filebeats-nginx-problem/141952/8 "2018-07-27T15:18:04Z")

</div>

yes indeed, he must write at the log level.

try to access your ngnix server. you will see a few things

---

<div class="post-metadata">

**Author:** ![incls](https://avatars.discourse-cdn.com/v4/letter/i/9d8465/32.png) [@incls](https://discuss.elastic.co/u/incls)\
**Post date:** [July 27, 2018, 3:27pm UTC](https://discuss.elastic.co/t/filebeats-nginx-problem/141952/9 "2018-07-27T15:27:45Z")

</div>

Thanks For info 🙂 i wait for some output. if i get any info i post that

---

<div class="post-metadata">

**Author:** ![incls](https://avatars.discourse-cdn.com/v4/letter/i/9d8465/32.png) [@incls](https://discuss.elastic.co/u/incls)\
**Post date:** [July 27, 2018, 4:39pm UTC](https://discuss.elastic.co/t/filebeats-nginx-problem/141952/10 "2018-07-27T16:39:11Z")

</div>

Now is nothing happened. When i run filebeat -e i have black screen and i dont get error/info etc 😕 nothing happend too with kibana.

---

<div class="post-metadata">

**Author:** ![Charaf\_Ahmed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/charaf_ahmed/32/30467_2.png) [@Charaf\_Ahmed](https://discuss.elastic.co/u/Charaf_Ahmed)\
**Post date:** [July 28, 2018, 7:25am UTC](https://discuss.elastic.co/t/filebeats-nginx-problem/141952/11 "2018-07-28T07:25:48Z")

</div>

let it go and go to kibana / dasborad / chose filebeat-ngnix

---

<div class="post-metadata">

**Author:** ![incls](https://avatars.discourse-cdn.com/v4/letter/i/9d8465/32.png) [@incls](https://discuss.elastic.co/u/incls)\
**Post date:** [July 28, 2018, 11:49am UTC](https://discuss.elastic.co/t/filebeats-nginx-problem/141952/12 "2018-07-28T11:49:45Z")

</div>

Nothing - 0 output, in kibana i see only

> No data to display for the selected metrics

> No results displayed because all values equal 0.

> Operating systems breakdown [Filebeat Nginx]

When i choice

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 25, 2018, 1:49pm UTC](https://discuss.elastic.co/t/filebeats-nginx-problem/141952/13 "2018-08-25T13:49:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
