# Require clarification on filebeat ingest pipeline

**URL:** <https://discuss.elastic.co/t/require-clarification-on-filebeat-ingest-pipeline/155346>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [November 5, 2018, 6:50am UTC](https://discuss.elastic.co/t/require-clarification-on-filebeat-ingest-pipeline/155346 "2018-11-05T06:50:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Nithani25](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nithani25/32/33457_2.png) [@Nithani25](https://discuss.elastic.co/u/Nithani25)\
**Post date:** [November 5, 2018, 6:50am UTC](https://discuss.elastic.co/t/require-clarification-on-filebeat-ingest-pipeline/155346/1 "2018-11-05T06:50:22Z")

</div>

Hi Team,  
I have installed a brand new setup in my production environment, i am successful in injecting the apache access and error logs via filebeat apache2 module. however, my access log seems to have some additonal data in it like reponse time and user id added to it.

though included those two fields in ingest/default.json i am not able to see them displayed in my kibana. Also my target server has some virtual environment details so i have different environment logs present in the same server,so how can i add new filed referring the environment name and also incldued in the index name.

---

<div class="post-metadata">

**Author:** ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)\
**Post date:** [November 5, 2018, 8:41am UTC](https://discuss.elastic.co/t/require-clarification-on-filebeat-ingest-pipeline/155346/2 "2018-11-05T08:41:26Z")

</div>

Have you updated the pipeline on your Ingest node? Filebeat does not upload pipelines if one exists with the same name. To force refreshing the pipeline you can either set `filebeat.override_pipelines` to `true` or run `./filebeat setup -modules=apache2 --pipelines`.

In order to index your custom fields, you need to checkout the Beats repository. Add your fields to `filebeat/module/apache2/access/_meta/fields.yml` and run `make update`. This updates the index pattern of Filebeat. Run `./filebeat setup -modules=apache2` to update assets on the Ingest node.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 3, 2018, 8:51am UTC](https://discuss.elastic.co/t/require-clarification-on-filebeat-ingest-pipeline/155346/3 "2018-12-03T08:51:10Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
