# Tomcat logs in filebeat **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [June 29, 2021, 8:05am UTC](https://discuss.elastic.co/t/tomcat-logs-in-filebeat/277313 "2021-06-29T08:05:23Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Prasanth\_V](https://avatars.discourse-cdn.com/v4/letter/p/8c91f0/32.png) [@Prasanth\_V](https://discuss.elastic.co/u/Prasanth_V)\ **Post date:** [June 29, 2021, 8:05am UTC](https://discuss.elastic.co/t/tomcat-logs-in-filebeat/277313/1 "2021-06-29T08:05:23Z")
If I add a tomcat log paths in tomcat.yml..why is it not showing in discover section..could you pls give the solution on this case?? ---
**Author:** ![legoguy1000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/legoguy1000/32/54301_2.png) [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\ **Post date:** [June 30, 2021, 12:55am UTC](https://discuss.elastic.co/t/tomcat-logs-in-filebeat/277313/2 "2021-06-30T00:55:20Z")
Have you enabled the tomcat module? ---
**Author:** ![Prasanth\_V](https://avatars.discourse-cdn.com/v4/letter/p/8c91f0/32.png) [@Prasanth\_V](https://discuss.elastic.co/u/Prasanth_V)\ **Post date:** [June 30, 2021, 5:04am UTC](https://discuss.elastic.co/t/tomcat-logs-in-filebeat/277313/3 "2021-06-30T05:04:11Z")
Yeah, I have been enabled. After that paste the log path in yaml file. It's not showing in discover tab...this is exact issue on this case..could you pls suggest it?? ---
**Author:** ![legoguy1000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/legoguy1000/32/54301_2.png) [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\ **Post date:** [June 30, 2021, 10:54am UTC](https://discuss.elastic.co/t/tomcat-logs-in-filebeat/277313/4 "2021-06-30T10:54:35Z")
Can you please post the tomcat.yml and filebeat.yml files? Also can you post the filebeat logs? ---
**Author:** ![Prasanth\_V](https://avatars.discourse-cdn.com/v4/letter/p/8c91f0/32.png) [@Prasanth\_V](https://discuss.elastic.co/u/Prasanth_V)\ **Post date:** [July 1, 2021, 5:30am UTC](https://discuss.elastic.co/t/tomcat-logs-in-filebeat/277313/5 "2021-07-01T05:30:27Z")
''' tomcat.yml: - module: tomcat Filebeat.yml: ###################### Filebeat Configuration Example ######################### # This file is an example configuration file highlighting only the most common # options. The filebeat.reference.yml file from the same directory contains all the # supported options with more comments. You can use it as a reference. # # You can find the full configuration reference here: # [Filebeat Reference | Elastic](https://www.elastic.co/guide/en/beats/filebeat/index.html) # For more available modules and options, please see the filebeat.reference.yml sample # configuration file. # ============================== Filebeat inputs =============================== filebeat.inputs: # Each - is an input. Most options can be set at the input level, so # you can use different inputs for various configurations. # Below are the input specific configurations. - type: log # filestream is an experimental input. It is going to replace log input in the future. - type: filestream # ============================== Filebeat modules ============================== filebeat.config.modules: # Glob pattern for configuration loading path: ${path.config}/modules.d/\*.yml # Set to true to enable config reloading reload.enabled: true # Period on which files under path should be checked for changes #reload.period: 10s # ======================= Elasticsearch template setting ======================= setup.template.settings: index.number\_of\_shards: 1 #index.codec: best\_compression #\_source.enabled: false # ================================== General =================================== # The name of the shipper that publishes the network data. It can be used to group # all the transactions sent by a single shipper in the web interface. #name: # The tags of the shipper are included in their own field with each # transaction published. tags: ["filebeat"] # Optional fields that you can specify to add additional information to the # output. #fields: # env: staging # ================================= Dashboards ================================= # These settings control loading the sample dashboards to the Kibana index. Loading # the dashboards is disabled by default and can be enabled either by setting the # options here or by using the `setup` command. #setup.dashboards.enabled: false # The URL from where to download the dashboards archive. By default this URL # has a value which is computed based on the Beat name and version. For released # versions, this URL points to the dashboard archive on the [artifacts.elastic.co](http://artifacts.elastic.co) # website. #setup.dashboards.url: # =================================== Kibana =================================== # Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API. # This requires a Kibana endpoint configuration. #setup.kibana: # Kibana Host # Scheme and port can be left out and will be set to the default (http and 5601) # In case you specify and additional path, the scheme is required: [http://localhost:5601/path](http://localhost:5601/path) # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601 #host: "localhost:5601" # Kibana Space ID # ID of the Kibana Space into which the dashboards should be loaded. By default, # the Default Space will be used. #space.id: # =============================== Elastic Cloud ================================ # These settings simplify using Filebeat with the Elastic Cloud ([https://cloud.elastic.co/](https://cloud.elastic.co/)). # The cloud.id setting overwrites the `output.elasticsearch.hosts` and # `setup.kibana.host` options. # You can find the `cloud.id` in the Elastic Cloud web UI. #cloud.id: # The cloud.auth setting overwrites the `output.elasticsearch.username` and # `output.elasticsearch.password` settings. The format is `:`. #cloud.auth: # ================================== Outputs =================================== # Configure what output to use when sending the data collected by the beat. # ---------------------------- Elasticsearch Output ---------------------------- #output.elasticsearch: # Array of hosts to connect to. #hosts: ["localhost:9200"] # Protocol - either `http` (default) or `https`. #protocol: "https" # Authentication credentials - either API key or username/password. #api\_key: "id:api\_key" #username: "elastic" #password: "changeme" # ------------------------------ Logstash Output ------------------------------- output.logstash: # The Logstash hosts hosts: ["IP Address:5044"] # Optional SSL. By default is off. # List of root certificates for HTTPS server verifications #ssl.certificate\_authorities: ["/etc/pki/root/ca.pem"] # Certificate for SSL client authentication #ssl.certificate: "/etc/pki/client/cert.pem" # Client Certificate Key #ssl.key: "/etc/pki/client/cert.key" Filebeat Logs: Jun 30 16:38:52 tomcat filebeat[1093]: 2021-06-30T16:38:52.809+0530 INFO [beat] instance/beat.go:1041 Process info {"system\_info": {"process" Jun 30 16:38:52 tomcat filebeat[1093]: 2021-06-30T16:38:52.810+0530 INFO instance/beat.go:304 Setup Beat: filebeat; Version: 7.12.1 Jun 30 16:38:52 tomcat filebeat[1093]: 2021-06-30T16:38:52.810+0530 INFO [publisher] pipeline/module.go:113 Beat name: tomcat Jun 30 16:38:52 tomcat filebeat[1093]: 2021-06-30T16:38:52.811+0530 WARN beater/filebeat.go:178 Filebeat is unable to load the Ingest Node pipelines for th Jun 30 16:38:52 tomcat filebeat[1093]: 2021-06-30T16:38:52.811+0530 INFO [monitoring] log/log.go:117 Starting metrics logging every 30s Jun 30 16:38:52 tomcat filebeat[1093]: 2021-06-30T16:38:52.811+0530 INFO instance/beat.go:468 filebeat start running. Jun 30 16:38:52 tomcat filebeat[1093]: 2021-06-30T16:38:52.813+0530 INFO memlog/store.go:119 Loading data file of '/var/lib/filebeat/registry/filebeat' suc Jun 30 16:38:52 tomcat filebeat[1093]: 2021-06-30T16:38:52.853+0530 INFO memlog/store.go:124 Finished loading transaction log file for '/var/lib/filebeat/ Jun 30 16:38:52 tomcat filebeat[1093]: 2021-06-30T16:38:52.853+0530 WARN beater/filebeat.go:381 Filebeat is unable to load the Ingest Node pipelines for th Jun 30 16:38:52 tomcat filebeat[1093]: 2021-06-30T16:38:52.854+0530 INFO [registrar] registrar/registrar.go:109 States Loaded from registrar: 127 Jun 30 16:38:52 tomcat filebeat[1093]: 2021-06-30T16:38:52.854+0530 INFO [crawler] beater/crawler.go:71 Loading Inputs: 2 Jun 30 16:38:53 tomcat filebeat[1093]: 2021-06-30T16:38:53.100+0530 INFO log/input.go:157 Configured paths: [/home/tomcat/logs/localhost\_access.txt Jun 30 16:38:53 tomcat filebeat[1093]: 2021-06-30T16:38:53.101+0530 INFO [crawler] beater/crawler.go:141 Starting input (ID: 11010157828768882092) Jun 30 16:38:53 tomcat filebeat[1093]: 2021-06-30T16:38:53.101+0530 INFO [crawler] beater/crawler.go:108 Loading and starting Inputs completed. Enab Jun 30 16:38:53 tomcat filebeat[1093]: 2021-06-30T16:38:53.101+0530 INFO cfgfile/reload.go:164 Config reloader started Jun 30 16:38:55 tomcat filebeat[1093]: 2021-06-30T16:38:55.807+0530 INFO [add\_cloud\_metadata] add\_cloud\_metadata/add\_cloud\_metadata.go:101 add\_cloud Jun 30 16:39:03 tomcat filebeat[1093]: 2021-06-30T16:39:03.104+0530 INFO log/input.go:157 Configured paths: [/] Jun 30 16:39:03 tomcat filebeat[1093]: 2021-06-30T16:39:03.106+0530 INFO log/input.go:157 Configured paths: [/home/tomcat/logs/catalina.out] Jun 30 16:39:03 tomcat filebeat[1093]: 2021-06-30T16:39:03.335+0530 INFO log/input.go:157 Configured paths: [/home/tomcat/logs/localhost\_access.txt] Jun 30 16:39:03 tomcat filebeat[1093]: 2021-06-30T16:39:03.384+0530 INFO log/input.go:157 Configured paths: [/var/log/auth.log\* /var/log/secure\*] Jun 30 16:39:03 tomcat filebeat[1093]: 2021-06-30T16:39:03.387+0530 INFO log/input.go:157 Configured paths: [/home/tomcat/logs/catalina.out] Jun 30 16:39:03 tomcat filebeat[1093]: 2021-06-30T16:39:03.389+0530 INFO log/harvester.go:302 Harvester started for file: /var/log/secure Jun 30 16:39:04 tomcat filebeat[1093]: 2021-06-30T16:39:04.390+0530 INFO [publisher\_pipeline\_output] pipeline/output.go:143 Connecting to backoff(as Jun 30 16:39:04 tomcat filebeat[1093]: 2021-06-30T16:39:04.390+0530 INFO [publisher] pipeline/retry.go:219 retryer: send unwait signal to consumer Jun 30 16:39:04 tomcat filebeat[1093]: 2021-06-30T16:39:04.390+0530 INFO [publisher] pipeline/retry.go:223 done Jun 30 16:39:04 tomcat filebeat[1093]: 2021-06-30T16:39:04.391+0530 INFO [publisher\_pipeline\_output] pipeline/output.go:151 Connection to backoff(as ''' ---
**Author:** ![legoguy1000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/legoguy1000/32/54301_2.png) [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\ **Post date:** [July 1, 2021, 11:03am UTC](https://discuss.elastic.co/t/tomcat-logs-in-filebeat/277313/6 "2021-07-01T11:03:26Z")
Can you please repost the configs using the code blocks. Its very hard to read without it. 3x ` 3x` ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 29, 2021, 11:03am UTC](https://discuss.elastic.co/t/tomcat-logs-in-filebeat/277313/7 "2021-07-29T11:03:38Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.