# Metricbeat error about scanning empty io.stat file

**URL:** <https://discuss.elastic.co/t/metricbeat-error-about-scanning-empty-io-stat-file/308063>\
**Category:** Beats\
**Tags:** docker, metricbeat\
**Created:** [June 23, 2022, 11:53pm UTC](https://discuss.elastic.co/t/metricbeat-error-about-scanning-empty-io-stat-file/308063 "2022-06-23T23:53:52Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![matutter](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matutter/32/107524_2.png) [@matutter](https://discuss.elastic.co/u/matutter)\
**Post date:** [June 23, 2022, 11:53pm UTC](https://discuss.elastic.co/t/metricbeat-error-about-scanning-empty-io-stat-file/308063/1 "2022-06-23T23:53:52Z")

</div>

I'm deploying _metricbeat_ and using the _system_ and _docker_ modules but keep getting an error message in my logs. My configs are below. The content of `/hostfs/sys/fs/cgroup/io.stat` on my system is nothing - it is an empty file.

I was redirected to this forum from Github.

The error message:

```auto
{
  "log.level": "error",
  "@timestamp": "2022-06-23T23:39:06.781Z",
  "log.origin": { "file.name": "metrics/metrics.go", "file.line": 294 },
  "message": "error getting cgroup stats for V2: error fetching stats for controller io: error fetching IO stats: error getting io.stats for path /hostfs/sys/fs/cgroup: error scanning file: /hostfs/sys/fs/cgroup/io.stat: input does not match format",
  "service.name": "metricbeat",
  "ecs.version": "1.6.0",
}

```

From **docker-compose** file (its 2k+ lines long, this is a snippet):

```auto
version: "3.9"

networks:
  beats_net:
    internal: false

services:

  metricbeat:
    image: docker.elastic.co/beats/metricbeat:8.2.2

    hostname: 'test.lab'

    user: root

    privileged: true

    volumes:
      - /home/thebench/test/sim1/simtest/beats/metricbeat.yml:/usr/share/metricbeat/metricbeat.yml:ro
      - /proc:/hostfs/proc:ro
      - /:/hostfs:ro
      - /sys/fs/cgroup:/hostfs/sys/fs/cgroup:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro

    restart: unless-stopped

    networks:
      - beats_net

```

My **metricbeat.yml** :

```auto
logging.to_stderr: true [52/4739]
logging.level: error                                                                  
                                           
output.logstash:                     
  hosts: ["logstash.test.lab:5044"]
                                           
monitoring.enabled: false
                                           
metricbeat.autodiscover:     
  providers:
    - type: docker                         
      hints.enabled: true 
                                           
metricbeat.modules:              
                                           
  # metrics that are collected more frequently
  - module: system
    hostfs: /hostfs   
    period: 10s            
    cpu.metrics: [percentages]                                                       
    core.metrics: [percentages]
    metricsets:
      - cpu # no priv
      - load # no priv
      - memory # no priv, e.g. swap, total, used, free, actual
      - network # no priv, network metrics for interfaces

  # metrics that are collected less frequently
  - module: system
    hostfs: /hostfs
    period: 1m
    processors:
      - drop_event.when.regexp:
          system.filesystem.mount_point: '^/(sys|cgroup|proc|dev|etc|host|lib)($|/)'
    metricsets:
      - filesystem # no priv, e.g. size, free, used

  # metrics that are collected rarely
    hostfs: /hostfs
  - module: system
    period: 15m
    metricsets:
      - uptime # no priv

  - module: docker
    metricsets:
      - cpu
      - diskio
      - event
      - info
      - memory
      - network
    hosts:
      - unix:///var/run/docker.sock
    period: 10s

  - module: docker
    period: 1m
    hosts:
      - unix:///var/run/docker.sock
    metricsets:
      - healthcheck

  - module: docker
    period: 15m
    hosts:
      - unix:///var/run/docker.sock
    metricsets:
      - container
      - image

processors:
  - add_fields:
      target: project
      fields:
        name: simtest

  - drop_fields:
      ignore_missing: true
      fields:
        - docker.container.labels
        - docker.event.actor.attributes

  - add_host_metadata:
      netinfo.enabled: true

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 22, 2022, 1:54am UTC](https://discuss.elastic.co/t/metricbeat-error-about-scanning-empty-io-stat-file/308063/2 "2022-07-22T01:54:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.