# SSH field not showing up with System module
**URL:** https://discuss.elastic.co/t/ssh-field-not-showing-up-with-system-module/154599
**Category:** Beats
**Tags:** filebeat
**Created:** [October 30, 2018, 9:39am UTC](https://discuss.elastic.co/t/ssh-field-not-showing-up-with-system-module/154599 "2018-10-30T09:39:37Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@dvelasco](https://discuss.elastic.co/u/dvelasco)
#### Post date: [October 30, 2018, 9:39am UTC](https://discuss.elastic.co/t/ssh-field-not-showing-up-with-system-module/154599/1 "2018-10-30T09:39:37Z")
Hello,
I've setup an Elastic Stack and some Filebeat clients with System module enabled, but the SSH fields doesn't show up.
Fileset.module and fileset.name are correct, and the messages I receive in Elastic have the format
`Oct 30 09:04:53 VBOX_DEB_TEST sshd[1670]: Failed password for root from 192.168.1.129 port 62167 ssh2`
I've setup Filebeat to send to Logstash, but I don't know exactly why those ssh fields doesn't show up. I'm not using any custom configuration, all the settings are the default.
What I'm doing wrong?
---
### Author:  [@jsoriano](https://discuss.elastic.co/u/jsoriano)
#### Post date: [October 30, 2018, 12:16pm UTC](https://discuss.elastic.co/t/ssh-field-not-showing-up-with-system-module/154599/2 "2018-10-30T12:16:18Z")
Hi @dvelasco and welcome 🙂
It seems that current pattern we use to parse hostnames doesn't accept underscores, I have opened an issue ([#8814](https://github.com/elastic/beats/issues/8814)) to follow on this.
Thanks for reporting!
---
### Author:  [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)
#### Post date: [November 16, 2018, 4:53am UTC](https://discuss.elastic.co/t/ssh-field-not-showing-up-with-system-module/154599/3 "2018-11-16T04:53:30Z")
@dvelasco, Adding...You can't use the filebeat dashboards when you use logstash as output in filebeat.yml.
If you still want to use the feature of filebeat dashboard and logstash as output you need to create the logtsash pipeline for your syslog, auth.log etc.
You can refer the below link:
[https://www.elastic.co/guide/en/logstash/5.6/filebeat-modules.html](https://www.elastic.co/guide/en/logstash/5.6/filebeat-modules.html)
Kindly let me know if you have any query.
Thanks.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 14, 2018, 5:06am UTC](https://discuss.elastic.co/t/ssh-field-not-showing-up-with-system-module/154599/4 "2018-12-14T05:06:46Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.