# Zeek http logs not showing IP fileds

**URL:** <https://discuss.elastic.co/t/zeek-http-logs-not-showing-ip-fileds/363735>\
**Category:** Kibana\
**Created:** [July 24, 2024, 4:51pm UTC](https://discuss.elastic.co/t/zeek-http-logs-not-showing-ip-fileds/363735 "2024-07-24T16:51:33Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![syed\_naqvi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syed_naqvi/32/136277_2.png) [@syed\_naqvi](https://discuss.elastic.co/u/syed_naqvi)\
**Post date:** [July 24, 2024, 4:51pm UTC](https://discuss.elastic.co/t/zeek-http-logs-not-showing-ip-fileds/363735/1 "2024-07-24T16:51:33Z")

</div>

Hi,

I am using Elasticsearch cloud trial. All data I can see is ingested . However when check zeek http logs dont see any source Ip other fields.  
Where is checked zeek conn logs and it showing IP info there .  
Any help please ?

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [July 24, 2024, 5:04pm UTC](https://discuss.elastic.co/t/zeek-http-logs-not-showing-ip-fileds/363735/2 "2024-07-24T17:04:03Z")

</div>

Welcome to the community!

Not sure have you integrated by [EAgent](https://www.elastic.co/docs/current/en/integrations/zeek) or [FBeat](https://www.elastic.co/guide/en/beats/filebeat/current/exported-fields-zeek.html).  
Try to search for fields: `source.ip` or `zeek.dhcp.address.client`

---

<div class="post-metadata">

**Author:** ![syed\_naqvi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syed_naqvi/32/136277_2.png) [@syed\_naqvi](https://discuss.elastic.co/u/syed_naqvi)\
**Post date:** [July 24, 2024, 5:46pm UTC](https://discuss.elastic.co/t/zeek-http-logs-not-showing-ip-fileds/363735/3 "2024-07-24T17:46:55Z")

</div>

> [@Rios](#):
>
> zeek.dhcp.address.client

Hello ,

Thanks but dont see any values though created new data see logs of zeek but not those fields. Like Ip address etc.

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [July 24, 2024, 7:22pm UTC](https://discuss.elastic.co/t/zeek-http-logs-not-showing-ip-fileds/363735/4 "2024-07-24T19:22:21Z")

</div>

What have you used for integration EA or FB?

Can you show data structure from Kibana - Discover?

---

<div class="post-metadata">

**Author:** ![syed\_naqvi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syed_naqvi/32/136277_2.png) [@syed\_naqvi](https://discuss.elastic.co/u/syed_naqvi)\
**Post date:** [July 24, 2024, 8:14pm UTC](https://discuss.elastic.co/t/zeek-http-logs-not-showing-ip-fileds/363735/5 "2024-07-24T20:14:07Z")

</div>

Hi,

I used ES- Zeek integration .

Thanks sure please find below as its only allowing me to post only 1 image .

 ![zeekes-5](https://us1.discourse-cdn.com/elastic/original/3X/e/9/e96a81269a30769dc41a56902fe618725370f992.jpeg)

Regards

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [July 24, 2024, 9:07pm UTC](https://discuss.elastic.co/t/zeek-http-logs-not-showing-ip-fileds/363735/6 "2024-07-24T21:07:05Z")

</div>

You are using FBeat.  
Do you have fields:  
_source.address, source.ip, destination.address or destination.ip or http.response.status\_code?_

---

<div class="post-metadata">

**Author:** ![syed\_naqvi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syed_naqvi/32/136277_2.png) [@syed\_naqvi](https://discuss.elastic.co/u/syed_naqvi)\
**Post date:** [July 24, 2024, 9:10pm UTC](https://discuss.elastic.co/t/zeek-http-logs-not-showing-ip-fileds/363735/7 "2024-07-24T21:10:48Z")

</div>

Finally fixed an issue removed integration for zeek then reinstalled integration and agent , issue resolved . But really appreciate your concern and help on the issue.
