# How to get IPTable information using beats or elastic agent

**URL:** <https://discuss.elastic.co/t/how-to-get-iptable-information-using-beats-or-elastic-agent/356190>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 26, 2024, 2:27pm UTC](https://discuss.elastic.co/t/how-to-get-iptable-information-using-beats-or-elastic-agent/356190 "2024-03-26T14:27:59Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![learningelastic](https://avatars.discourse-cdn.com/v4/letter/l/958977/32.png) [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Post date:** [March 26, 2024, 2:27pm UTC](https://discuss.elastic.co/t/how-to-get-iptable-information-using-beats-or-elastic-agent/356190/1 "2024-03-26T14:27:59Z")

</div>

When I type the command `iptables -S`, I see this:

```auto
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-N f2b-pizza-login
-A INPUT -p tcp -m multiport --dports 0:65535 -j f2b-pizza-login
-A f2b-pizza-login -s 192.168.88.16/32 -j REJECT --reject-with icmp-port-unreachable
-A f2b-pizza-login -j RETURN

```

I then successfully installed filebeat on this same machine. This is what my `/etc/filebeat/modules.d/iptables.yml` looks like:

```auto
- module: iptables
  log:
    enabled: true

```

When I go to **Kibana \> Dashboard \> [Logs Iptables] Overview**, none of the visualizations show any data.

When I go to **Kibana \> Discover** and search for the term **pizza** , no results show up when I search the data views `filebeat-*` or `logs-*` or these data views:  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/d/1db5cc0fba3f612a9cf96d29950a10850ac82153.png)

In fact none of the data views show any mention of the term **pizza**.

I also tried installing a standalone elastic agent and using the IP Tables integration. Again, no mention of the term **pizza** in any of the dataviews or dashboards.

I can see the filebeat and elastic agent are both successfully transmitting other pieces of information to my elastic+kibana stack. But I'm just not getting anything related to the `f2b-pizza-login` chain.

I am open to using other elastic tools to getting information about the `f2b-pizza-login` chain of hte iptables into my elastic stack.

What am i doing wrong? Or what tools should I be using?

* * *

I am using Elasticsearch and Kibana version 8.11.3

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 23, 2024, 4:28pm UTC](https://discuss.elastic.co/t/how-to-get-iptable-information-using-beats-or-elastic-agent/356190/2 "2024-04-23T16:28:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.