# No such input type exist: 'etw'

**URL:** <https://discuss.elastic.co/t/no-such-input-type-exist-etw/357621>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [April 17, 2024, 1:27pm UTC](https://discuss.elastic.co/t/no-such-input-type-exist-etw/357621 "2024-04-17T13:27:36Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![oed-brosentd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/oed-brosentd/32/133602_2.png) [@oed-brosentd](https://discuss.elastic.co/u/oed-brosentd)\
**Post date:** [April 17, 2024, 1:27pm UTC](https://discuss.elastic.co/t/no-such-input-type-exist-etw/357621/1 "2024-04-17T13:27:36Z")

</div>

Hey there,

I was trying to test out the new ETW input in filebeat, but am only getting the following error message:

```auto
{"log.level":"error","@timestamp":"2024-04-17T14:37:11.214+0200","log.origin":{"function":"github.com/elastic/beats/v7/libbeat/cmd/instance.handleError","file.name":"instance/beat.go","file.line":1340},"message":"Exiting: Failed to start crawler: starting input failed: error while initializing input: Error creating input. No such input type exist: 'etw'","service.name":"filebeat","ecs.version":"1.6.0"}

```

Tried with versions 8.13.1 & 8.13.2 and also different input definitions (following the examples at [ETW input | elastic.co](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-etw.html)), all leading to the same error message.

As I'm using the OSS version and saw a different discussion which hinted at that being the culprit: is there a difference in the availability of input features?

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [April 17, 2024, 3:54pm UTC](https://discuss.elastic.co/t/no-such-input-type-exist-etw/357621/2 "2024-04-17T15:54:00Z")

</div>

> [@oed-brosentd](#):
>
> As I'm using the OSS version and saw a different discussion which hinted at that being the culprit: is there a difference in the availability of input features?

Yes, there is, not everything will be available in the OSS version.

I don't think there is any list in the documentation, but you can check on the github repositoiry.

If i'm not wrong, these are the inputs available in all distributions (Elastic and OSS):

> **[beats/filebeat/input at main · elastic/beats](https://github.com/elastic/beats/tree/main/filebeat/input)**
>
> :tropical\_fish: Beats - Lightweight shippers for Elasticsearch &amp; Logstash - elastic/beats

And these are the inputs available only on Elastic distribution:

> **[beats/x-pack/filebeat/input at main · elastic/beats](https://github.com/elastic/beats/tree/main/x-pack/filebeat/input)**
>
> :tropical\_fish: Beats - Lightweight shippers for Elasticsearch &amp; Logstash - elastic/beats

As you can see, the `etw` input is under the `x-pack` path, which means that it needs a basic license at least.
