Postgresql module not populating event fields (Windows)


I have enabled to the postgres module pointing to my log files. When i start filebeat i can see that is picks up the logs and processes them, but it does not seem to be populating the postgresql fields in the event


  • module: postgresql

    All logs

    enabled: true

    Set custom paths for the log files. If left empty,

    Filebeat will choose the paths depending on your OS.

    var.paths: ["C://Program Files//PostgreSQL//9.6//data//pg_log//*.log"]


"_index": "eth-filebeat-6.2.1-2018.02.15",
"_type": "doc",
"_id": "zwu9mmEB7PoIeysneRls",
"_version": 1,
"_score": null,
"_source": {
"tags": [
"host": "POSTGRESQL",
"source": "C:\Program Files\PostgreSQL\9.6\data\pg_log\postgresql-2017-06-09_000000.log",
"offset": 796555,
"@timestamp": "2018-02-15T18:32:37.747Z",
"message": "2017-06-09 15:35:30 BST STATEMENT: GRANT ALL ON SEQUENCE sds_org_person_seq TO "spinalTapAcc_nf ";",
"fields": {
"source_type": "filebeat",
"env": "ETH"
"beat": {
"name": "POSTGRESQL",
"hostname": "POSTGRESQL",
"version": "6.2.1"
"@version": "1",
"prospector": {
"type": "log"
"fileset": {
"module": "postgresql",
"name": "log"
"fields": {
"@timestamp": [
"highlight": {
"fileset.module": [
"sort": [

What is your Postgresql version? Do you have custom a log format?
Could you share a few example input logs which cannot be parsed correctly?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.