Module doesn't exist (but it does)

Elastic Stack Beats
,
1

Hi,
While trying to configure filebeat modules, I keep getting "module doesn't exist". It doesn't matter which module I try. Also the "filebeat modules list" command doesn't any modules. The service does run without issue though.
sudo /usr/share/filebeat/bin/filebeat modules enable elasticsearch
Error initializing beat: error loading config file: stat filebeat.yml: no such file or directory

sudo /usr/share/filebeat/bin/filebeat modules enable elasticsearch -c /etc/filebeat/filebeat.yml
Module elasticsearch doesn't exist!

ls -l /usr/share/filebeat/module/
total 0
drwxr-xr-x. 4 root root  51 Sep 11 13:04 apache
drwxr-xr-x. 2 root root  24 Sep 11 13:04 apache2
drwxr-xr-x. 3 root root  35 Sep 11 13:04 auditd
drwxr-xr-x. 4 root root  63 Sep 11 13:04 cisco
drwxr-xr-x. 3 root root  52 Sep 11 13:04 coredns
drwxr-xr-x. 7 root root  95 Sep 11 13:04 elasticsearch
drwxr-xr-x. 3 root root  52 Sep 11 13:04 envoyproxy
drwxr-xr-x. 3 root root  21 Sep 11 13:04 googlecloud
drwxr-xr-x. 3 root root  35 Sep 11 13:04 haproxy
drwxr-xr-x. 5 root root  64 Sep 11 13:04 icinga
drwxr-xr-x. 4 root root  33 Sep 11 13:04 iis
drwxr-xr-x. 3 root root  52 Sep 11 13:04 iptables
drwxr-xr-x. 3 root root  35 Sep 11 13:04 kafka
drwxr-xr-x. 3 root root  35 Sep 11 13:04 kibana
drwxr-xr-x. 4 root root  50 Sep 11 13:04 logstash
drwxr-xr-x. 3 root root  35 Sep 11 13:04 mongodb
drwxr-xr-x. 3 root root  17 Sep 11 13:04 mssql
drwxr-xr-x. 4 root root  52 Sep 11 13:04 mysql
drwxr-xr-x. 3 root root  35 Sep 11 13:04 nats
drwxr-xr-x. 3 root root  17 Sep 11 13:04 netflow
drwxr-xr-x. 4 root root  51 Sep 11 13:04 nginx
drwxr-xr-x. 3 root root  38 Sep 11 13:04 osquery
drwxr-xr-x. 3 root root  54 Sep 11 13:04 panw
drwxr-xr-x. 3 root root  35 Sep 11 13:04 postgresql
drwxr-xr-x. 3 root root  17 Sep 11 13:04 rabbitmq
drwxr-xr-x. 4 root root  50 Sep 11 13:04 redis
drwxr-xr-x. 3 root root  35 Sep 11 13:04 santa
drwxr-xr-x. 3 root root  52 Sep 11 13:04 suricata
drwxr-xr-x. 4 root root  50 Sep 11 13:04 system
drwxr-xr-x. 3 root root  38 Sep 11 13:04 traefik
drwxr-xr-x. 8 root root 147 Sep 11 13:04 zeek

This happening on multiple CentOS installations. I used the repo (https://www.elastic.co/guide/en/beats/auditbeat/7.3/setup-repositories.html#_yum) to install filebeat. I haven't tried using the rpm installation yet.

2

If I rename /etc/filebeat/modules.d/elasticsearch.yml.disabled to elasticsearch.yml - the module loads as expected.

I'm still not sure why the filebeat modules enable and filebeat modules list commands don't work.

3

This doesn't work for me either. If you installed it with yum then you should be able to simply type

filebeat modules enable elasticsearch
filebeat modules list
1 Like
4

That does work. Odd that I can't call it with the full path.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.