# Source missing in filebeat logs **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [August 7, 2023, 5:48pm UTC](https://discuss.elastic.co/t/source-missing-in-filebeat-logs/340291 "2023-08-07T17:48:14Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![vaibhav.ubale](https://avatars.discourse-cdn.com/v4/letter/v/e9a140/32.png) [@vaibhav.ubale](https://discuss.elastic.co/u/vaibhav.ubale)\ **Post date:** [August 7, 2023, 5:48pm UTC](https://discuss.elastic.co/t/source-missing-in-filebeat-logs/340291/1 "2023-08-07T17:48:14Z")
Hi Team , I have set up the filebeat to send the custom logs to Elasticsearch cluster, But there is "Source" missing on logs when I see them in Filebeat. I am using filebeat-8.7.0-1.x86\_64 for sending the logs. is this normal or am I missing something, Logs have not been very helpful. Can someone help me? Regards Vaibhav ---
**Author:** ![vaibhav.ubale](https://avatars.discourse-cdn.com/v4/letter/v/e9a140/32.png) [@vaibhav.ubale](https://discuss.elastic.co/u/vaibhav.ubale)\ **Post date:** [August 9, 2023, 7:04pm UTC](https://discuss.elastic.co/t/source-missing-in-filebeat-logs/340291/2 "2023-08-09T19:04:57Z")
Hi , is field "source" deprecated ? Experts please help! ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [August 9, 2023, 7:18pm UTC](https://discuss.elastic.co/t/source-missing-in-filebeat-logs/340291/3 "2023-08-09T19:18:03Z")
Hello, It is not clear what is your issue, you need to provide more context. What is missing and where? Please share some examples of what are you seeing and what you expected to see. ---
**Author:** ![vaibhav.ubale](https://avatars.discourse-cdn.com/v4/letter/v/e9a140/32.png) [@vaibhav.ubale](https://discuss.elastic.co/u/vaibhav.ubale)\ **Post date:** [August 9, 2023, 7:34pm UTC](https://discuss.elastic.co/t/source-missing-in-filebeat-logs/340291/4 "2023-08-09T19:34:12Z")
Thanks @leandrojmp for your reply. there was no `source` field coming from Filebeat , which I was trying to use. This stack flow question helped me to use log.file.path for my purpose. Just putting it over here for anyone who comes across same problem: "[How to get parts of Filebeat source filename in Logstash - Stack Overflow](https://stackoverflow.com/questions/59358382/how-to-get-parts-of-filebeat-source-filename-in-logstash)" Thanks again ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [August 9, 2023, 7:44pm UTC](https://discuss.elastic.co/t/source-missing-in-filebeat-logs/340291/5 "2023-08-09T19:44:29Z")
> [@vaibhav.ubale](#): > > there was no `source` field coming from Filebeat , which I was trying to use There is no `source` field since version 7.0, it was changed to `log.file.path` or `log.source.address`. Were you following some tutorial that mentioned this field? I would recommend that when you follow some tutorial always check with the official documentation since the Elastic Stack has been changing a lot in the past years. ---
**Author:** ![vaibhav.ubale](https://avatars.discourse-cdn.com/v4/letter/v/e9a140/32.png) [@vaibhav.ubale](https://discuss.elastic.co/u/vaibhav.ubale)\ **Post date:** [August 10, 2023, 8:51am UTC](https://discuss.elastic.co/t/source-missing-in-filebeat-logs/340291/6 "2023-08-10T08:51:34Z")
Thanks ! point taken. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [September 7, 2023, 10:52am UTC](https://discuss.elastic.co/t/source-missing-in-filebeat-logs/340291/7 "2023-09-07T10:52:09Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.