# How to monitor a file for its version, code signature etc
**URL:** https://discuss.elastic.co/t/how-to-monitor-a-file-for-its-version-code-signature-etc/263178
**Category:** Beats
**Tags:** filebeat, metricbeat, winlogbeat
**Created:** [February 3, 2021, 11:28pm UTC](https://discuss.elastic.co/t/how-to-monitor-a-file-for-its-version-code-signature-etc/263178 "2021-02-03T23:28:06Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@rsgupta0110](https://discuss.elastic.co/u/rsgupta0110)
#### Post date: [February 3, 2021, 11:28pm UTC](https://discuss.elastic.co/t/how-to-monitor-a-file-for-its-version-code-signature-etc/263178/1 "2021-02-03T23:28:07Z")
I would like to monitor files inside a directory for the file description like version, code signature etc. without uploading the files to Elastic Search. I found this File fields but not sure how to add these fields in filebeat.yml. Any sample will be great.
> **[File Fields | Elastic Common Schema (ECS) Reference \[1.7\] | Elastic](https://www.elastic.co/guide/en/ecs/current/ecs-file.html)**
---
### Author:  [@kvch](https://discuss.elastic.co/u/kvch)
#### Post date: [February 4, 2021, 4:28pm UTC](https://discuss.elastic.co/t/how-to-monitor-a-file-for-its-version-code-signature-etc/263178/2 "2021-02-04T16:28:29Z")
Monitoring files can be done with Auditbeat: [File Integrity Module | Auditbeat Reference [7.10] | Elastic](https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-module-file_integrity.html)
---
### Author:  [@rsgupta0110](https://discuss.elastic.co/u/rsgupta0110)
#### Post date: [February 7, 2021, 1:29pm UTC](https://discuss.elastic.co/t/how-to-monitor-a-file-for-its-version-code-signature-etc/263178/3 "2021-02-07T13:29:15Z")
Thanks, I tried auditbeat and getting the following fields only. No file.pe.version as mentioned in the link .. [PE Header Fields | Elastic Common Schema (ECS) Reference [1.7] | Elastic](https://www.elastic.co/guide/en/ecs/current/ecs-pe.html#field-pe-file-version)
fields.type, file.ctime, file.drive\_letter, file.extension, file.hash.sha1, file.inode, file.mime\_type, , file.mtime, file.owner, file.path, file.size, file.type, file.uid
Do I need to enable any other module to get File.pe\* ?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 7, 2021, 3:30pm UTC](https://discuss.elastic.co/t/how-to-monitor-a-file-for-its-version-code-signature-etc/263178/4 "2021-03-07T15:30:11Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.