# IBM HTTP Server

**URL:** <https://discuss.elastic.co/t/ibm-http-server/293862>\
**Category:** Beats\
**Tags:** filebeat, metricbeat\
**Created:** [January 10, 2022, 8:30am UTC](https://discuss.elastic.co/t/ibm-http-server/293862 "2022-01-10T08:30:13Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![rodri.gz](https://avatars.discourse-cdn.com/v4/letter/r/aca169/32.png) [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\
**Post date:** [January 10, 2022, 8:30am UTC](https://discuss.elastic.co/t/ibm-http-server/293862/1 "2022-01-10T08:30:13Z")

</div>

Hello !

Does ELK have modules to monitor with metricbeat and obtain logs previously parsed with filebeat from IBM HTTP servers?

Thanks in advanced!

---

<div class="post-metadata">

**Author:** ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)\
**Post date:** [January 10, 2022, 9:49am UTC](https://discuss.elastic.co/t/ibm-http-server/293862/2 "2022-01-10T09:49:41Z")

</div>

Hi!

I'm not sure if I correctly understand your description here but there is an http module for Metricbeat that might be what you are looking for: [HTTP module | Metricbeat Reference [7.16] | Elastic](https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-module-http.html)

C.

---

<div class="post-metadata">

**Author:** ![rodri.gz](https://avatars.discourse-cdn.com/v4/letter/r/aca169/32.png) [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\
**Post date:** [January 11, 2022, 11:00am UTC](https://discuss.elastic.co/t/ibm-http-server/293862/3 "2022-01-11T11:00:55Z")

</div>

Thanks for answering.

My understanding is that the ibm http server is based on apache. I'm wrong?

I know the filebeat apache module for an http server but I would like to know if this is also usable with the ibm http server knowing that it is based on Apache Software Foundation's HTTP Server or if there is a specific module for ibm avoiding parsing the logs by myself.

thank you!

---

<div class="post-metadata">

**Author:** ![legoguy1000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/legoguy1000/32/54301_2.png) [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\
**Post date:** [January 11, 2022, 1:37pm UTC](https://discuss.elastic.co/t/ibm-http-server/293862/4 "2022-01-11T13:37:44Z")

</div>

There is no separate ibm module for filebeat. You'd have to see if the IBM web server logs outputs in the same format as Apache. See the patterns used here, [beats/pipeline.yml at master · elastic/beats · GitHub](https://github.com/elastic/beats/blob/master/filebeat/module/apache/access/ingest/pipeline.yml#L10)

---

<div class="post-metadata">

**Author:** ![Iker](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/iker/32/91708_2.png) [@Iker](https://discuss.elastic.co/u/Iker)\
**Post date:** [January 11, 2022, 1:51pm UTC](https://discuss.elastic.co/t/ibm-http-server/293862/5 "2022-01-11T13:51:28Z")

</div>

There is a tomcat module in Filebeat so it could be of help for your use case.

> **[Tomcat module | Filebeat Reference \[7.16\] | Elastic](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-tomcat.html)**

---

<div class="post-metadata">

**Author:** ![rodri.gz](https://avatars.discourse-cdn.com/v4/letter/r/aca169/32.png) [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\
**Post date:** [January 11, 2022, 1:56pm UTC](https://discuss.elastic.co/t/ibm-http-server/293862/6 "2022-01-11T13:56:49Z")

</div>

That is what I supposed, I had a little hope that there was already a module that was worth it, I will try to do an extraction of logs and check if they follow the same / similar format or start with ETL.

Thanks!

---

<div class="post-metadata">

**Author:** ![rodri.gz](https://avatars.discourse-cdn.com/v4/letter/r/aca169/32.png) [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\
**Post date:** [January 11, 2022, 1:57pm UTC](https://discuss.elastic.co/t/ibm-http-server/293862/7 "2022-01-11T13:57:56Z")

</div>

I will look at this option and some other such as apache and if it does not work I will use those patterns that can work.

Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 8, 2022, 3:58pm UTC](https://discuss.elastic.co/t/ibm-http-server/293862/8 "2022-02-08T15:58:07Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
