# HTTP Protocol not sending header
**URL:** https://discuss.elastic.co/t/http-protocol-not-sending-header/27359
**Category:** Beats
**Tags:** packetbeat
**Created:** [August 14, 2015, 2:08am UTC](https://discuss.elastic.co/t/http-protocol-not-sending-header/27359 "2015-08-14T02:08:08Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@iemem15](https://discuss.elastic.co/u/iemem15)
#### Post date: [August 14, 2015, 2:08am UTC](https://discuss.elastic.co/t/http-protocol-not-sending-header/27359/1 "2015-08-14T02:08:08Z")
Hi when sending info to elasticsearch I can't see the headers for the http protocol, Im using packet beats beta 2. I started with -d "httpdetailed" and I see the headers, but can't see them in elasticsearch
I've configured de packetbeat.yml like this:
```
protocols:
http:
# Configure the ports where to listen for HTTP traffic. You can disable
# the http protocol by commenting the list of ports.
ports: [80, 8080, 8000, 5000, 8002, 5601]
# Uncomment the following to hide certain parameters in URL or forms attached
# to HTTP requests. The names of the parameters are case insensitive.
# The value of the parameters will be replaced with the 'xxxxx' string.
# This is generally useful for avoiding storing user passwords or other
# sensitive information.
# Only query parameters and top level form parameters are replaced.
# hide_keywords: ['pass', 'password', 'passwd']
send_response: true
send_all_headers: true
send_headers: ["User-Agent", "Cookie", "Set-Cookie"]
split_coookie: true
real_ip_header: "X-Forwarded-For"
```
send\_all\_headers
---
### Author:  [@tudor](https://discuss.elastic.co/u/tudor)
#### Post date: [August 17, 2015, 9:54am UTC](https://discuss.elastic.co/t/http-protocol-not-sending-header/27359/2 "2015-08-17T09:54:49Z")
Unless this got broken while copy & pasting, the `send_all_headers: true` option needs to be under the http section, so you need to indent all of those options with another two spaces, like this:
```
protocols:
http:
# Configure the ports where to listen for HTTP traffic. You can disable
# the http protocol by commenting the list of ports.
ports: [80, 8080, 8000, 5000, 8002, 5601]
# Uncomment the following to hide certain parameters in URL or forms attached
# to HTTP requests. The names of the parameters are case insensitive.
# The value of the parameters will be replaced with the 'xxxxx' string.
# This is generally useful for avoiding storing user passwords or other
# sensitive information.
# Only query parameters and top level form parameters are replaced.
# hide_keywords: ['pass', 'password', 'passwd']
send_response: true
send_all_headers: true
split_coookie: true
real_ip_header: "X-Forwarded-For"
```
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 9:58pm UTC](https://discuss.elastic.co/t/http-protocol-not-sending-header/27359/3 "2017-07-05T21:58:59Z")