# OFFLINE Labs - Issue on loading filebeat data for log-servers

**URL:** <https://discuss.elastic.co/t/offline-labs-issue-on-loading-filebeat-data-for-log-servers/262863>\
**Category:** Elastic Training\
**Created:** [February 1, 2021, 4:17pm UTC](https://discuss.elastic.co/t/offline-labs-issue-on-loading-filebeat-data-for-log-servers/262863 "2021-02-01T16:17:46Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Francois\_Protopapa](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/francois_protopapa/32/83226_2.png) [@Francois\_Protopapa](https://discuss.elastic.co/u/Francois_Protopapa)\
**Post date:** [February 1, 2021, 4:17pm UTC](https://discuss.elastic.co/t/offline-labs-issue-on-loading-filebeat-data-for-log-servers/262863/1 "2021-02-01T16:17:46Z")

</div>

Dear Team,  
I started to setup m offline LABS for the EE 1 and all went well, but for some reason, I am not able to import the log files collected in the ZIP file.

Here what I did:

1. Followed the step by steps: Running labs on your local machine

2. when I executed step 8 Run Filebeat to ingest the log files, the process started but nothing happens, the process runs in the background but after hours of running nothing is imported.

3. I stop and restarted the process adding the -e -d "\*" parameters to monitoring the situation.

4. With the debug mode looks like is not able to process the data.

Thank you in advance for your time and support.  
Regards,  
Francois

---

<div class="post-metadata">

**Author:** ![Romain\_Geffraye](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/romain_geffraye/32/77053_2.png) [@Romain\_Geffraye](https://discuss.elastic.co/u/Romain_Geffraye)\
**Post date:** [February 1, 2021, 6:04pm UTC](https://discuss.elastic.co/t/offline-labs-issue-on-loading-filebeat-data-for-log-servers/262863/2 "2021-02-01T18:04:28Z")

</div>

Hello Francois,

Did you correctly set up the path in the configuration file?

Open the file `datasets/filebeat.yml` and make sure that the path is correctly set to the directory that contains the zip file you extracted.

For example, my local config looks like this:

```
 filebeat.inputs:
- type: log
  enabled: true
  paths:
    - /Users/romain/local_lab/datasets/elastic_blog_curated_access_logs_server*/*.log

```

Let us know if you need further assistance.

Best regards,

Romain

---

<div class="post-metadata">

**Author:** ![Francois\_Protopapa](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/francois_protopapa/32/83226_2.png) [@Francois\_Protopapa](https://discuss.elastic.co/u/Francois_Protopapa)\
**Post date:** [February 2, 2021, 8:27am UTC](https://discuss.elastic.co/t/offline-labs-issue-on-loading-filebeat-data-for-log-servers/262863/3 "2021-02-02T08:27:23Z")

</div>

Hi Romain,  
thank you for your feedback.  
Yes the path in the file datasets/filebeat.yml it looks correct setup, I tried an even different approach, with the full path and with the relative path like below.

Ex1:  
filebeat.inputs:

- type: log  
enabled: true  
paths:
  - ./datasets/elastic\_blog\_curated\_access\_logs\_server\*/\*.log

ex2:  
filebeat.inputs:

- type: log  
enabled: true  
paths:
  - /Users/francoisprotopapa/Applications/elasticsearch-7-8-0/datasets/elastic\_blog\_curated\_access\_logs\_server\*/\*.log

I even tried to simplifier it but without success.

Could it be some permission issue? I even run with root, sudo permission.

Thank you for your help.  
Regards,  
Francois

---

<div class="post-metadata">

**Author:** ![Romain\_Geffraye](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/romain_geffraye/32/77053_2.png) [@Romain\_Geffraye](https://discuss.elastic.co/u/Romain_Geffraye)\
**Post date:** [February 2, 2021, 9:01am UTC](https://discuss.elastic.co/t/offline-labs-issue-on-loading-filebeat-data-for-log-servers/262863/4 "2021-02-02T09:01:09Z")

</div>

The configuration looks good.

Did you extract the log at the right place ? Run `/Users/francoisprotopapa/Applications/elasticsearch-7-8-0/datasets`

Also, could you send the full logs from filebeat?

Romain

---

<div class="post-metadata">

**Author:** ![Francois\_Protopapa](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/francois_protopapa/32/83226_2.png) [@Francois\_Protopapa](https://discuss.elastic.co/u/Francois_Protopapa)\
**Post date:** [February 2, 2021, 9:07am UTC](https://discuss.elastic.co/t/offline-labs-issue-on-loading-filebeat-data-for-log-servers/262863/5 "2021-02-02T09:07:46Z")

</div>

Hi Roman,  
yes, the file is unzipped in the folder where the filebeat.yml is pointing ...  
I will send you the log via slack 🙂  
Francois

---

<div class="post-metadata">

**Author:** ![Francois\_Protopapa](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/francois_protopapa/32/83226_2.png) [@Francois\_Protopapa](https://discuss.elastic.co/u/Francois_Protopapa)\
**Post date:** [February 2, 2021, 9:39am UTC](https://discuss.elastic.co/t/offline-labs-issue-on-loading-filebeat-data-for-log-servers/262863/6 "2021-02-02T09:39:55Z")

</div>

UPDATE: Issue fixed by changing the access permission to ALL subfolders in the unzipped main folder. Now the process is running 🙂  
thank you for your support 🙂  
Regards,  
Francois

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 4, 2021, 9:40am UTC](https://discuss.elastic.co/t/offline-labs-issue-on-loading-filebeat-data-for-log-servers/262863/7 "2021-03-04T09:40:34Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.