# No modules or inputs enabled - GCP vpcflow

**URL:** <https://discuss.elastic.co/t/no-modules-or-inputs-enabled-gcp-vpcflow/344246>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [October 2, 2023, 4:19pm UTC](https://discuss.elastic.co/t/no-modules-or-inputs-enabled-gcp-vpcflow/344246 "2023-10-02T16:19:00Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![rschirin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rschirin/32/45283_2.png) [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Post date:** [October 2, 2023, 4:19pm UTC](https://discuss.elastic.co/t/no-modules-or-inputs-enabled-gcp-vpcflow/344246/1 "2023-10-02T16:19:00Z")

</div>

hey there,  
I am really confused about the correct configuration of Filebeat v8.8.1 GCP module.  
I need to enable the vpcflow module, so I configured the `gcp.yml` file in this way:

```auto
- module: gcp
  vpcflow:
    enabled: true
    var.project_id: clf-lab-ops
    var.topic: test-vpc-flow
    var.subscription_name: log-vpc-flow

```

and my `filebeat.yml` config file is almost empy. I configured only the output section.  
I am facing this error:

```auto
{"log.level":"error","@timestamp":"2023-10-02T16:15:25.000Z","log.origin":{"file.name":"instance/beat.go","file.line":1274},"message":"Exiting: no modules or inputs enabled and configuration reloading disabled. What files do you want me to watch?","service.name":"filebeat","ecs.version":"1.6.0"}
Exiting: no modules or inputs enabled and configuration reloading disabled. What files do you want me to watch?

```

If I try to specify into filebeat.yml file the following section:

```auto
filebeat.modules:
  - module: gcp
    vpcflow:
    enabled: true

```

I got this error:

```auto
{"log.level":"warn","@timestamp":"2023-10-02T16:17:59.766Z","log.logger":"gcp.pubsub","log.origin":{"file.name":"gcppubsub/input.go","file.line":160},"message":"Restarting failed Pub/Sub input worker.","service.name":"filebeat","pubsub_project":"SET_PROJECT_NAME","pubsub_topic":"stackdriver-vpcflow","pubsub_subscription":{"Name":"filebeat-gcp-vpcflow","NumGoroutines":1,"MaxOutstandingMessages":1000,"Create":true},"error":{"message":"failed to subscribe to pub/sub topic: failed to check if subscription exists: rpc error: code = InvalidArgument desc = You have passed an invalid argument to the service (argument=SET_PROJECT_NAME)."},"ecs.version":"1.6.0"}

```

So I am really confused. What should I do? Where should I specify which module I would enable?

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [October 2, 2023, 7:11pm UTC](https://discuss.elastic.co/t/no-modules-or-inputs-enabled-gcp-vpcflow/344246/2 "2023-10-02T19:11:13Z")

</div>

> [@rschirin](#):
>
> gcp.yml

So you ran

`filebeat modules enable gcp`

correct?

What installation method did you use?

And super silly question you actually saved that gcp.yml

are there any other modules enabled or .yml in the `modules.d` directory

Turns out they all get concatenated together so I have seen when there was another .yml that was cancelling out the other.

---

<div class="post-metadata">

**Author:** ![rschirin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rschirin/32/45283_2.png) [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Post date:** [October 2, 2023, 8:00pm UTC](https://discuss.elastic.co/t/no-modules-or-inputs-enabled-gcp-vpcflow/344246/3 "2023-10-02T20:00:02Z")

</div>

Nope I don't use that command.  
I am using Docker.  
Yes I saved that file and no other are into the modules.d folder.

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [October 2, 2023, 8:42pm UTC](https://discuss.elastic.co/t/no-modules-or-inputs-enabled-gcp-vpcflow/344246/4 "2023-10-02T20:42:11Z")

</div>

@rschirin

There is something basic going on...

Like your docker is not mounting that modules.d directory or something.

---

<div class="post-metadata">

**Author:** ![rschirin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rschirin/32/45283_2.png) [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Post date:** [October 2, 2023, 8:50pm UTC](https://discuss.elastic.co/t/no-modules-or-inputs-enabled-gcp-vpcflow/344246/5 "2023-10-02T20:50:34Z")

</div>

I thought that so I checked it inside. Modules.d folder contains only my file. So really, I cannot understand what is happening

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [October 2, 2023, 9:08pm UTC](https://discuss.elastic.co/t/no-modules-or-inputs-enabled-gcp-vpcflow/344246/6 "2023-10-02T21:08:29Z")

</div>

Is it readable? Something simple that message it that is can find not enabled configs ... you can see when you put it in the filebeat.yml it sees it... you can always put it in there...

> [@rschirin](#):
>
> and my `filebeat.yml` config file is almost empy

AHHH wait ... show me your full filebeat.yml ...

Do you have the path to the modules.d defined in that?

---

<div class="post-metadata">

**Author:** ![rschirin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rschirin/32/45283_2.png) [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Post date:** [October 2, 2023, 9:14pm UTC](https://discuss.elastic.co/t/no-modules-or-inputs-enabled-gcp-vpcflow/344246/7 "2023-10-02T21:14:37Z")

</div>

```auto
logging.level: debug

# ================================== Logging ===============================
# If enabled, Filebeat periodically logs its internal metrics that have changed
# in the last period. For each metric that changed, the delta from the value at
# the beginning of the period is logged. Also, the total values for
# all non-zero internal metrics are logged on shutdown. The default is true.
logging.metrics.enabled: true

# The period after which to log the internal metrics. The default is 30s.
logging.metrics.period: 300s

#========================= Filebeat Processor ================================#
#
#
processors:
  - add_id: ~
#
#========================== Filebeat Elasticsearch output ===============================#
output.elasticsearch:
  hosts: ["es-rally:9200"]
  protocol: http
  client_authentication: none

```

that's all 🙂  
so, probably, you find the issue: I haven't the path to the modules.d folder. is it mandatory? I thought there was a default value usable.

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [October 2, 2023, 9:21pm UTC](https://discuss.elastic.co/t/no-modules-or-inputs-enabled-gcp-vpcflow/344246/8 "2023-10-02T21:21:54Z")

</div>

> [@rschirin](#):
>
> I haven't the path to the modules.d folder. is it mandatory?

Yup! otherwise they are not added.. 🙂  
So there you have it...

Usually looks like

```auto
filebeat.config.modules:
  # Glob pattern for configuration loading
  path: ${path.config}/modules.d/*.yml

  # Set to true to enable config reloading
  reload.enabled: false

  # Period on which files under path should be checked for changes
  #reload.period: 10s

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 30, 2023, 11:21pm UTC](https://discuss.elastic.co/t/no-modules-or-inputs-enabled-gcp-vpcflow/344246/9 "2023-10-30T23:21:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.