# \[Metricbeat Docker\] Overview ECS is showing no data and error: \[esaggs\] \> "field" is a required parameter

**URL:** <https://discuss.elastic.co/t/metricbeat-docker-overview-ecs-is-showing-no-data-and-error-esaggs-field-is-a-required-parameter/206540>\
**Category:** Beats\
**Tags:** metricbeat\
**Created:** [November 5, 2019, 8:04am UTC](https://discuss.elastic.co/t/metricbeat-docker-overview-ecs-is-showing-no-data-and-error-esaggs-field-is-a-required-parameter/206540 "2019-11-05T08:04:51Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Simon\_Becker](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/simon_becker/32/87100_2.png) [@Simon\_Becker](https://discuss.elastic.co/u/Simon_Becker)\
**Post date:** [November 5, 2019, 8:04am UTC](https://discuss.elastic.co/t/metricbeat-docker-overview-ecs-is-showing-no-data-and-error-esaggs-field-is-a-required-parameter/206540/1 "2019-11-05T08:04:51Z")

</div>

Hello,

I am using Metricbeat in docker to monitor my systems Metrics as well as my docker metrics.  
Unfortunately, i get an error in Kibana showing this:

 ![2019-11-05_08h55_20](https://us1.discourse-cdn.com/elastic/original/3X/8/0/808924575a7d89324e4a43dfe659221d41527f67.png)

```
My metricbeat config looks like this:
    metricbeat.autodiscover:
  providers:
    - type: docker
      hints.enabled: true

metricbeat.modules:
#- module: nginx
# enabled: true
# metricsets: ["stubstatus"]
# period: 20s
# hosts: ["http://nginx:80"]
# server_status_path: "server-status"

- module: docker
  metricsets:
    - "container"
    - "cpu"
    - "diskio"
    - "event"
    - "healthcheck"
    - "info"
    #- "image"
    - "memory"
    - "network"
  hosts: ["unix:///var/run/docker.sock"]
  period: 30s
  enabled: true

- module: system
  metricsets:
    - cpu # CPU usage
    - load # CPU load averages
    - memory # Memory usage
    - network # Network IO
    - process # Per process metrics
    - process_summary # Process summary
    - uptime # System Uptime
    - socket_summary # Socket summary
    #- core # Per CPU core usage
    #- diskio # Disk IO
    #- filesystem # File system usage for each mountpoint
    #- fsstat # File system summary metrics
    #- raid # Raid
    #- socket # Sockets and connection info (linux only)
  enabled: false
  period: 20s
  processes: ['.*']

  # Configure the metric types that are included by these metricsets.
  cpu.metrics: ["percentages"] # The other available options are normalized_percentages and ticks.
  core.metrics: ["percentages"] # The other available option is ticks.

```

My Docker Compose file looks like this:

> services:  
> metricbeat:  
> container\_name: metricbeat  
> build: ${PWD}/config/metricbeat  
> restart: always  
> user: root  
> volumes:  
> - /proc:/hostfs/proc:ro  
> - /sys/fs/cgroup:/hostfs/sys/fs/cgroup:ro  
> - /:/hostfs:ro  
> - /var/run:/var/run  
> networks:  
> - push-network  
> command: metricbeat -e -system.hostfs=/hostfs

In discover, I can see the incoming data from my different docker containers:

 ![2019-11-05_09h03_37](https://us1.discourse-cdn.com/elastic/original/3X/8/5/859e511ad7e5a311dc732716d97d75ecac21896c.png)

Does anyone has an idea how to fix this?

Thanks! 🙂

---

<div class="post-metadata">

**Author:** ![Kaiyan\_Sheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kaiyan_sheng/32/38247_2.png) [@Kaiyan\_Sheng](https://discuss.elastic.co/u/Kaiyan_Sheng)\
**Post date:** [December 2, 2019, 10:41pm UTC](https://discuss.elastic.co/t/metricbeat-docker-overview-ecs-is-showing-no-data-and-error-esaggs-field-is-a-required-parameter/206540/2 "2019-12-02T22:41:21Z")

</div>

Sorry for the late response here. Not sure if you already tried removing the index and then restart metricbeat?  
You can stop metricbeat, then delete the metricbeat index by going to kibana dev tools:

```auto
GET _cat/indices
DELETE metricbeat-8.0.0-2019.11.21-000001

```

You can also do the same thing to remove template:

```auto
GET _cat/templates
DELETE _template/metricbeat-8.0.0             

```

Then restart metricbeat, that might help resolving this error.

---

<div class="post-metadata">

**Author:** ![Simon\_Becker](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/simon_becker/32/87100_2.png) [@Simon\_Becker](https://discuss.elastic.co/u/Simon_Becker)\
**Post date:** [December 5, 2019, 9:46am UTC](https://discuss.elastic.co/t/metricbeat-docker-overview-ecs-is-showing-no-data-and-error-esaggs-field-is-a-required-parameter/206540/3 "2019-12-05T09:46:31Z")

</div>

Thanks for the info, removing the index actually solved the issue.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 2, 2020, 9:46am UTC](https://discuss.elastic.co/t/metricbeat-docker-overview-ecs-is-showing-no-data-and-error-esaggs-field-is-a-required-parameter/206540/4 "2020-01-02T09:46:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.