# Prevent from filebeat to logging to /var/messages

**URL:** <https://discuss.elastic.co/t/prevent-from-filebeat-to-logging-to-var-messages/223773>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 16, 2020, 1:54pm UTC](https://discuss.elastic.co/t/prevent-from-filebeat-to-logging-to-var-messages/223773 "2020-03-16T13:54:02Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Burga](https://avatars.discourse-cdn.com/v4/letter/b/9d8465/32.png) [@Burga](https://discuss.elastic.co/u/Burga)\
**Post date:** [March 16, 2020, 1:54pm UTC](https://discuss.elastic.co/t/prevent-from-filebeat-to-logging-to-var-messages/223773/1 "2020-03-16T13:54:02Z")

</div>

Hi ,

is there any way to prevent from filebeat logging to /var/messages ? ,

it logging and sends to logstash every beat

example /var/log/messages

```auto
Mar 16 15:27:19 solrc-stg1 filebeat[20876]: 2020-03-16T15:27:19.680+0200 INFO [monitoring] log/log.go:145 Non-zero metrics in the last 30s {"monitoring": {"metrics"
.....

```

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)\
**Post date:** [March 16, 2020, 4:07pm UTC](https://discuss.elastic.co/t/prevent-from-filebeat-to-logging-to-var-messages/223773/2 "2020-03-16T16:07:24Z")

</div>

What is your Filebeat version?

You can configure the logging path using `logging.files.path`: [https://www.elastic.co/guide/en/beats/filebeat/current/configuration-logging.html#\_logging\_files\_path](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-logging.html#_logging_files_path)

---

<div class="post-metadata">

**Author:** ![Burga](https://avatars.discourse-cdn.com/v4/letter/b/9d8465/32.png) [@Burga](https://discuss.elastic.co/u/Burga)\
**Post date:** [March 16, 2020, 9:41pm UTC](https://discuss.elastic.co/t/prevent-from-filebeat-to-logging-to-var-messages/223773/3 "2020-03-16T21:41:23Z")

</div>

Yes ,

adding

```auto

logging:
  level: info
  to_files: true
  to_syslog: false
  json: true
  files:
    path: '/var/log/filebeat'
    name: 'filebeat'
    keepfiles: '3'
    permissions: '0644'

```

and removing

```auto
 "Environment="BEAT_LOG_OPTS=-e"" 

```

solved the issue .  
Thanks .

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 13, 2020, 9:41pm UTC](https://discuss.elastic.co/t/prevent-from-filebeat-to-logging-to-var-messages/223773/4 "2020-04-13T21:41:29Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.