# \[metricbeat\]Error fetching data for metricset logstash.node: Could not find field 'id' in Logstash API response

**URL:** <https://discuss.elastic.co/t/metricbeat-error-fetching-data-for-metricset-logstash-node-could-not-find-field-id-in-logstash-api-response/299418>\
**Category:** 日本語による質問・議論はこちら\
**Created:** [March 11, 2022, 9:07am UTC](https://discuss.elastic.co/t/metricbeat-error-fetching-data-for-metricset-logstash-node-could-not-find-field-id-in-logstash-api-response/299418 "2022-03-11T09:07:24Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yos](https://avatars.discourse-cdn.com/v4/letter/y/ed8c4c/32.png) [@Yos](https://discuss.elastic.co/u/Yos)\
**Post date:** [March 11, 2022, 9:07am UTC](https://discuss.elastic.co/t/metricbeat-error-fetching-data-for-metricset-logstash-node-could-not-find-field-id-in-logstash-api-response/299418/1 "2022-03-11T09:07:24Z")

</div>

metricbeatでelastic stack監視をしようと  
logstash-xpackを有効化し、metricbeatを起動したところ、  
以下のエラーが出力されます。  
Kibana上ではLogstashのMonitoringはできているようですが、  
/var/log/messagesにエラーが出続けます。

このエラーの原因で思い当たること等ございましたら、ご教授ください。

```auto
■/etc/metricbeat/modules.d/logstash-xpack.ymlの設定
- module: logstash
  xpack.enabled: true
  period: 10s
  hosts: ["localhost:9600"]
  username: "superuserロールユーザ"
  password: ”パスワード"

```

```auto
■エラー内容
{
	"log.level": "error",
	"@timestamp": "2022-03-11T17:45:18.178+0900",
	"log.origin": {
		"file.name": "module/wrapper.go",
		"file.line": 254
	},
	"message": "Error fetching data for metricset logstash.node: Could not find field 'id' in Logstash API response",
	"service.name": "metricbeat",
	"ecs.version": "1.6.0"
}

```

OS：Redhat Linux 8.4（以下を１つのマシンにインストール済み）  
Elasticsearch：8.1.0  
Metricbeat：8.1.0  
Logstash：8.1.0  
Kibana：8.1.0

■参考サイト

> **[Collecting Elasticsearch monitoring data with Metricbeat | Elasticsearch...](https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-metricbeat.html)**

[https://www.creationline.com/blog/h-hibino/39618](https://www.creationline.com/blog/h-hibino/39618)

---

<div class="post-metadata">

**Author:** ![mashhurs](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mashhurs/32/102090_2.png) [@mashhurs](https://discuss.elastic.co/u/mashhurs)\
**Post date:** [March 16, 2022, 9:34pm UTC](https://discuss.elastic.co/t/metricbeat-error-fetching-data-for-metricset-logstash-node-could-not-find-field-id-in-logstash-api-response/299418/2 "2022-03-16T21:34:27Z")

</div>

Hey,

I don't understand Japanese language but it seems same as this issue: [link](https://discuss.elastic.co/t/metricbeat-cluster-monitoring-logstash-node-could-not-find-field-id-in-logstash-api-response/299651)

---

<div class="post-metadata">

**Author:** ![Yos](https://avatars.discourse-cdn.com/v4/letter/y/ed8c4c/32.png) [@Yos](https://discuss.elastic.co/u/Yos)\
**Post date:** [March 17, 2022, 1:10am UTC](https://discuss.elastic.co/t/metricbeat-error-fetching-data-for-metricset-logstash-node-could-not-find-field-id-in-logstash-api-response/299418/3 "2022-03-17T01:10:33Z")

</div>

@mashhurs  
I am also participating in that linked post.  
So, thank you for your response.  
I will try your suggestion in my environment.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 14, 2022, 1:11am UTC](https://discuss.elastic.co/t/metricbeat-error-fetching-data-for-metricset-logstash-node-could-not-find-field-id-in-logstash-api-response/299418/4 "2022-04-14T01:11:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.