# Zeek module
**URL:** https://discuss.elastic.co/t/zeek-module/205264
**Category:** Beats
**Tags:** filebeat
**Created:** [October 25, 2019, 1:22pm UTC](https://discuss.elastic.co/t/zeek-module/205264 "2019-10-25T13:22:05Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@tmans1991](https://discuss.elastic.co/u/tmans1991)
#### Post date: [October 25, 2019, 1:22pm UTC](https://discuss.elastic.co/t/zeek-module/205264/1 "2019-10-25T13:22:05Z")
Hello,
**my setup:**
in one server i log (with zeek) all data from the office network
on the same server i filebeat this data from the /opt/zeek/spool/logger/\*
to an other server with elastic and kibana
i also use the zeek module
**Extra info:**
When i look in /etc/filebeat/modules.d/zeek.yml file i see that the following logs get parsed:
conn.log , dns.log , http.log , files.lo , ssl.log and notice.log
this means that
capture\_loss.log , dce\_rpc.log , dhcp.log , dpd.log , known\_hosts.log , known\_services.log , mysql.log
ntlm.log , ntp.log , radius.log , reporter.log , sip.log , smb\_files.log , smbmapping.log , snmp.log , software.log , stats.log , stderr.log , stdout.log , syslog.log , weird.log and x509.log
does get send (i said that all .log files should be send in the filebeat.yml) but does not get parsed
all files are written in JSON
**my question:**
is what i said above correctly interpeted by me?
and if so how do i get this parsed so that elastic understands this data besides the already parsed data?
thanks
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 22, 2019, 1:22pm UTC](https://discuss.elastic.co/t/zeek-module/205264/2 "2019-11-22T13:22:06Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.