# How to use Filebeat Traefik module with Docker?

**URL:** <https://discuss.elastic.co/t/how-to-use-filebeat-traefik-module-with-docker/290272>\
**Category:** Beats\
**Tags:** docker, beats-module, filebeat\
**Created:** [November 26, 2021, 10:28am UTC](https://discuss.elastic.co/t/how-to-use-filebeat-traefik-module-with-docker/290272 "2021-11-26T10:28:26Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![bluepuma77](https://avatars.discourse-cdn.com/v4/letter/b/a9adbd/32.png) [@bluepuma77](https://discuss.elastic.co/u/bluepuma77)\
**Post date:** [November 26, 2021, 10:28am UTC](https://discuss.elastic.co/t/how-to-use-filebeat-traefik-module-with-docker/290272/1 "2021-11-26T10:28:26Z")

</div>

I am using Filebeat with Docker autodiscover. I added the Filebeat Traefik module to the config and it works fine when parsing access logs from the filesystem. My challenge is that Traefik does not do log roll-over.

```auto
filebeat.config:
  modules:
    path: ${path.config}/modules.d/*.yml
    reload.enabled: false

filebeat.autodiscover:
  providers:
    - type: docker
      hints.enabled: true

processors:
- add_cloud_metadata: ~

output.elasticsearch:
  hosts: '${ELASTICSEARCH_HOSTS:elasticsearch:9200}'
  username: '${ELASTICSEARCH_USERNAME:}'
  password: '${ELASTICSEARCH_PASSWORD:}'

filebeat.modules:
  - module: traefik
    access:
      enabled: true
      var.paths: ["/var/log/traefik/access.log*"]

```

1] I would like to have Traefik use stdout/stderr for logs, which Filebeat recognizes as plain text. How can I enable the Traefik access parsing module on the container output? Just removing `var.paths` does not seem to work.

2] Traefik also creates some internal messages which the Traefik parser labels as `failed to find message` because it does not fit the format. Is there an option to still keep the data instead of just an error?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 24, 2021, 12:29pm UTC](https://discuss.elastic.co/t/how-to-use-filebeat-traefik-module-with-docker/290272/2 "2021-12-24T12:29:08Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.