# Metricbeat apache module - error.message:HTTP error 404 in status: 404 Not Found

**URL:** https://discuss.elastic.co/t/metricbeat-apache-module-error-message-http-error-404-in-status-404-not-found/169911
**Category:** Beats
**Tags:** metricbeat
**Created:** [February 25, 2019, 9:59pm UTC](https://discuss.elastic.co/t/metricbeat-apache-module-error-message-http-error-404-in-status-404-not-found/169911 "2019-02-25T21:59:58Z")
**Posts on this page:** 11
**Page:** 1

<div class="post-metadata">

### Author: ![bradfordaemorton](https://avatars.discourse-cdn.com/v4/letter/b/f07891/32.png) [@bradfordaemorton](https://discuss.elastic.co/u/bradfordaemorton)
#### Post date: [February 25, 2019, 9:59pm UTC](https://discuss.elastic.co/t/metricbeat-apache-module-error-message-http-error-404-in-status-404-not-found/169911/1 "2019-02-25T21:59:58Z")

</div>

Hi All,

I have enabled the merticbeat module for apache. When reviewing the logs in Kibana I notice that I get an error -HTTP error 404 in status: 404 Not Found.

I guess there is something wrong in my configure? What is this module actually checking for and how does it collect the data. Config is below:

```
#Module: apache
# Docs: https://www.elastic.co/guide/en/beats/metricbeat/6.6/metricbeat-module-apache.html

- module: apache
  metricsets:
    - status
  period: 10s
  hosts: ["http://127.0.0.1"]
  username: "XXXX"
  password: "XXXX"
```

---

<div class="post-metadata">

### Author: ![amit1](https://avatars.discourse-cdn.com/v4/letter/a/71e660/32.png) [@amit1](https://discuss.elastic.co/u/amit1)
#### Post date: [February 27, 2019, 5:22am UTC](https://discuss.elastic.co/t/metricbeat-apache-module-error-message-http-error-404-in-status-404-not-found/169911/2 "2019-02-27T05:22:44Z")

</div>

Hey guys,  
Having same issue as OP. Fresh install of metricbeat 6.6.1 and enabled apache module. The system module in metricbeat is sending data to kibana without issue.  
My apache.yml file is the same as OP. Is there a config step that is required besides enabling the apache module?

Thanks for any insight!

[root@apps01-east metricbeat]# httpd -v  
Server version: Apache/2.4.6 (CentOS)  
Server built: Jun 27 2018 13:48:59

---

<div class="post-metadata">

### Author: ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)
#### Post date: [March 12, 2019, 8:47am UTC](https://discuss.elastic.co/t/metricbeat-apache-module-error-message-http-error-404-in-status-404-not-found/169911/3 "2019-03-12T08:47:15Z")

</div>

Could one of you share the metricbeat logs and some example outputs that you see in Kibana?

---

<div class="post-metadata">

### Author: ![amit1](https://avatars.discourse-cdn.com/v4/letter/a/71e660/32.png) [@amit1](https://discuss.elastic.co/u/amit1)
#### Post date: [March 12, 2019, 3:53pm UTC](https://discuss.elastic.co/t/metricbeat-apache-module-error-message-http-error-404-in-status-404-not-found/169911/4 "2019-03-12T15:53:55Z")

</div>

Hey @ruflin,  
After further digging around, it looks like my issue stemmed from not using a supported version of Apache. My version is 2.4.6

> **[Apache module | Metricbeat Reference \[6.6\] | Elastic](https://www.elastic.co/guide/en/beats/metricbeat/6.6/metricbeat-module-apache.html#_compatibility_5)**

> The Apache metricsets were tested with Apache 2.4.12 and 2.4.20 and are expected to work with all versions \>= 2.2.31 and \>= 2.4.16.

Thanks for checking in!  
Amit

---

<div class="post-metadata">

### Author: ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)
#### Post date: [March 14, 2019, 7:29am UTC](https://discuss.elastic.co/t/metricbeat-apache-module-error-message-http-error-404-in-status-404-not-found/169911/5 "2019-03-14T07:29:28Z")

</div>

I wonder if 2.4.6 has a bit a different format. Is there a specific reason you are on 2.4.6? I'm trying to understand if this is a popular version and we should dig deeper into why it's not working.

---

<div class="post-metadata">

### Author: ![amit1](https://avatars.discourse-cdn.com/v4/letter/a/71e660/32.png) [@amit1](https://discuss.elastic.co/u/amit1)
#### Post date: [March 14, 2019, 1:54pm UTC](https://discuss.elastic.co/t/metricbeat-apache-module-error-message-http-error-404-in-status-404-not-found/169911/6 "2019-03-14T13:54:13Z")

</div>

This seems to be the version installed with the standard repo's in CentOS. Even the EPEL repo installs httpd 2.4.6-88 (checked it again a moment ago).  
Apache seems to include all their security patches into this version as well.  
I would need to install other repo's in order to update to 2.4.16, which I have not done.  
I would like to be able to simply use the Apache module since everything is already setup for those logs.  
Can you include Apache 2.4.6 in Metricbeat?  
Thanks for your help.

---

<div class="post-metadata">

### Author: ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)
#### Post date: [March 15, 2019, 11:48am UTC](https://discuss.elastic.co/t/metricbeat-apache-module-error-message-http-error-404-in-status-404-not-found/169911/7 "2019-03-15T11:48:55Z")

</div>

Exactly what I was looking for / worried. Could you open a feature request in [https://github.com/elastic/beats](https://github.com/elastic/beats)

Would be great if you could also add an example output from 2.4.6 to the ticket which will make it much easier to test against it.

---

<div class="post-metadata">

### Author: ![amit1](https://avatars.discourse-cdn.com/v4/letter/a/71e660/32.png) [@amit1](https://discuss.elastic.co/u/amit1)
#### Post date: [March 15, 2019, 2:19pm UTC](https://discuss.elastic.co/t/metricbeat-apache-module-error-message-http-error-404-in-status-404-not-found/169911/8 "2019-03-15T14:19:43Z")

</div>

I've created the feature request on github.  
What kind of sample output are you looking for?  
The only output I can see is from /var/log/metricbeat/metricbeat as shown below. I see 3 events and 3 failures related to apache.

> 2019-03-15T14:15:55.818Z INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":170,"time":{"ms":60}},"total":{"ticks":420,"time":{"ms":153},"value":420},"user":{"ticks":250,"time":{"ms":93}}},"handles":{"limit":{"hard":4096,"soft":1024},"open":7},"info":{"ephemeral\_id":"4ca10600-ac1d-4097-9556-427be637890a","uptime":{"ms":63033}},"memstats":{"gc\_next":6466272,"memory\_alloc":5108016,"memory\_total":62687568,"rss":712704}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":191,"batches":3,"total":191},"read":{"bytes":24},"write":{"bytes":26869}},"pipeline":{"clients":8,"events":{"active":0,"published":191,"total":191},"queue":{"acked":191}}},"metricbeat":{"apache":{"status":{"events":3,"failures":3}},"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":6,"success":6},"process":{"events":18,"success":18},"process\_summary":{"events":3,"success":3},"socket":{"events":152,"success":152}}},"system":{"load":{"1":1.77,"15":1.46,"5":1.83,"norm":{"1":0.295,"15":0.2433,"5":0.305}}}}}}

---

<div class="post-metadata">

### Author: ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)
#### Post date: [March 15, 2019, 3:05pm UTC](https://discuss.elastic.co/t/metricbeat-apache-module-error-message-http-error-404-in-status-404-not-found/169911/9 "2019-03-15T15:05:16Z")

</div>

Thanks for filing. The output I'm looking for is the output from apache itself when manually accessing the status endpoint.

---

<div class="post-metadata">

### Author: ![amit1](https://avatars.discourse-cdn.com/v4/letter/a/71e660/32.png) [@amit1](https://discuss.elastic.co/u/amit1)
#### Post date: [March 15, 2019, 3:40pm UTC](https://discuss.elastic.co/t/metricbeat-apache-module-error-message-http-error-404-in-status-404-not-found/169911/10 "2019-03-15T15:40:18Z")

</div>

I don't have the /server-status endpoint accessible from the virtual-host on the server, but mod\_status is loaded, as seen below (I have trimmed the output). So not sure how to get you the output from the status endpoint.

> [root@apps01-east ~]# httpd -e debug  
> ......  
> [Fri Mar 15 15:35:47.437351 2019] [so:debug] [pid 34762] mod\_so.c(266): AH01575: loaded module status\_module from /etc/httpd/modules/mod\_status.so  
> ......  
> httpd (pid 34428) already running

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 12, 2019, 3:40pm UTC](https://discuss.elastic.co/t/metricbeat-apache-module-error-message-http-error-404-in-status-404-not-found/169911/11 "2019-04-12T15:40:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
