Packetbeat - external API response

Quick configuration question... new to beats

Viewing json status code and bytes output for each request however not the actual response. Is there a yml flag to set in order to display?

Please advise, Thanks!

Hello,

For all protocols, you can enable send_response (or send_request). Both options are common to all protocols

Depending on the protocol you want to inspect, you may want to limit which content types you inspect like this. For example, HTTP has the options include_body_for. See this second link for a full configuration snippet, to do just that for the HTTP protocol.

Good luck!

Mat

Much thanks, now able to view both json request and response in kibana. Thanks!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.