# \#beats-development **URL:** https://discuss.elastic.co/tag/beats-development/51.md [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) --- ## [Syslog parser fails on double backslashes in structured data](https://discuss.elastic.co/t/syslog-parser-fails-on-double-backslashes-in-structured-data/385386)
**Author:** [@briandoesdev](https://discuss.elastic.co/u/briandoesdev)\ **Replies:** 2\ **Last updated:** [March 10, 2026, 1:35pm UTC](https://discuss.elastic.co/t/syslog-parser-fails-on-double-backslashes-in-structured-data/385386 "2026-03-10T13:35:19Z")
Hello everyone, My org is using the Custom UDP Logs integration to ingest RFC 5424 syslog messages from several network appliances. One of the appliances includes structured data with a parameter value containing a doub… --- ## [Easier acces to information regarding the default fields sent by all the Beats](https://discuss.elastic.co/t/easier-acces-to-information-regarding-the-default-fields-sent-by-all-the-beats/383290)
**Author:** [@Jose\_E](https://discuss.elastic.co/u/Jose_E)\ **Replies:** 1\ **Last updated:** [November 7, 2025, 5:08pm UTC](https://discuss.elastic.co/t/easier-acces-to-information-regarding-the-default-fields-sent-by-all-the-beats/383290 "2025-11-07T17:08:19Z")
Hi there, I have a quick suggestion to improve the documentation of all the beats. Why don’t you add a section explaining the default fields that are expected of the beats, in the documentation? I don’t have to work of… --- ## [Elastic Agent service installed on Windows without noncrash failure flag](https://discuss.elastic.co/t/elastic-agent-service-installed-on-windows-without-noncrash-failure-flag/374043)
**Author:** [@jeremyvisser](https://discuss.elastic.co/u/jeremyvisser)\ **Replies:** 0\ **Last updated:** [February 4, 2025, 6:19am UTC](https://discuss.elastic.co/t/elastic-agent-service-installed-on-windows-without-noncrash-failure-flag/374043 "2025-02-04T06:19:30Z")
On Windows, services have a variety of options for automatic restarts, depending on the failure modes (similar to systemd serviced options). The problem is that the FAILURE\_ACTIONS\_ON\_NONCRASH\_FAILURES (or the "Enable a… --- ## [Erreur de démarrage d'Elasticsearch avec le code de sortie 137 dans le déploiement datamulti -nœudsmaster](https://discuss.elastic.co/t/erreur-de-demarrage-delasticsearch-avec-le-code-de-sortie-137-dans-le-deploiement-datamulti-noeudsmaster/370938)
**Author:** [@mayanza\_mpanzou\_arna](https://discuss.elastic.co/u/mayanza_mpanzou_arna)\ **Replies:** 0\ **Last updated:** [November 22, 2024, 9:27am UTC](https://discuss.elastic.co/t/erreur-de-demarrage-delasticsearch-avec-le-code-de-sortie-137-dans-le-deploiement-datamulti-noeudsmaster/370938 "2024-11-22T09:27:27Z")
Hello, I am currently encountering an issue with deploying two Elasticsearch nodes, a data nodemaster ERROR: Elasticsearch died while starting up, with exit code 137 I have set up the jvm.options file to define JVM pa… --- ## [Running integration tests for a specific integration](https://discuss.elastic.co/t/running-integration-tests-for-a-specific-integration/370140)
**Author:** [@jason26](https://discuss.elastic.co/u/jason26)\ **Replies:** 3\ **Last updated:** [November 7, 2024, 6:08pm UTC](https://discuss.elastic.co/t/running-integration-tests-for-a-specific-integration/370140 "2024-11-07T18:08:32Z")
Hi All, I'm trying to update some mappings for an Elastic Agent integration, specifically Suricata. I see some test input files and expected output files, but I haven't found a test that actually uses them. I've tried… --- ## [Unmarshaling JSON for metricbeat (Talend Management Console)](https://discuss.elastic.co/t/unmarshaling-json-for-metricbeat-talend-management-console/356596)
**Author:** [@h.d.intodata](https://discuss.elastic.co/u/h.d.intodata)\ **Replies:** 0\ **Last updated:** [April 2, 2024, 7:42am UTC](https://discuss.elastic.co/t/unmarshaling-json-for-metricbeat-talend-management-console/356596 "2024-04-02T07:42:49Z")
Hi Team, I am trying to setup a http metricbeat which monitors a Talend Management Console. My error is: Blockquote Apr 02 07:17:55 ip-172-31-28-66 metricbeat\[387\]: {"log.level":"error","@timestamp":"2024-04-02T07:17… --- ## [devtools.UseCommunityBeatPackaging() has gone missing](https://discuss.elastic.co/t/devtools-usecommunitybeatpackaging-has-gone-missing/353201)
**Author:** [@Lasse\_Johnsen](https://discuss.elastic.co/u/Lasse_Johnsen)\ **Replies:** 0\ **Last updated:** [February 13, 2024, 6:51pm UTC](https://discuss.elastic.co/t/devtools-usecommunitybeatpackaging-has-gone-missing/353201 "2024-02-13T18:51:46Z")
At Timebeat we build a community beat. It would be great to see more support for this reintroduced. Most if not all community beats have seen no development in 2-3 years except ours. I've noticed that in the latest vers… --- ## [Copy\_fields and Syslog parsing out of order](https://discuss.elastic.co/t/copy-fields-and-syslog-parsing-out-of-order/350418)
**Author:** [@Hythloday-zero](https://discuss.elastic.co/u/Hythloday-zero)\ **Replies:** 1\ **Last updated:** [January 22, 2024, 6:39pm UTC](https://discuss.elastic.co/t/copy-fields-and-syslog-parsing-out-of-order/350418 "2024-01-22T18:39:14Z")
When I use a Custom TCP Logs integration with Syslog parsing, I expect that Processors are used to reduce the number of fields in the exported event or to enhance the event with metadata. This executes in the agent bef… --- ## [Beats release docs for 8.6.2 missing](https://discuss.elastic.co/t/beats-release-docs-for-8-6-2-missing/329335)
**Author:** [@Alexander\_A](https://discuss.elastic.co/u/Alexander_A)\ **Replies:** 1\ **Last updated:** [July 20, 2023, 12:31am UTC](https://discuss.elastic.co/t/beats-release-docs-for-8-6-2-missing/329335 "2023-07-20T00:31:50Z")
After last release 8.7.0 notes for 8.6.2 missing and 8.6.1 present. Can you fix it? --- ## [X-pack/metricbeat/module/statsd: Unable to parse float values (statsd module) of counter metric type](https://discuss.elastic.co/t/x-pack-metricbeat-module-statsd-unable-to-parse-float-values-statsd-module-of-counter-metric-type/330095)
**Author:** [@shmsr\_elastic](https://discuss.elastic.co/u/shmsr_elastic)\ **Replies:** 1\ **Last updated:** [June 17, 2023, 7:04pm UTC](https://discuss.elastic.co/t/x-pack-metricbeat-module-statsd-unable-to-parse-float-values-statsd-module-of-counter-metric-type/330095 "2023-06-17T19:04:59Z")
I was exploring statsd's module code in beats while making some changes to the same and I noticed that the for metrics of type counter, we just support integers (of base 10 and 64 bitsize) and in case it is not the same… --- ## [Kubernetes beats deployment yaml syntax error linked from support documents to GitHub](https://discuss.elastic.co/t/kubernetes-beats-deployment-yaml-syntax-error-linked-from-support-documents-to-github/334722)
**Author:** [@AndrewDatTeranet](https://discuss.elastic.co/u/AndrewDatTeranet)\ **Replies:** 1\ **Last updated:** [May 30, 2023, 10:15pm UTC](https://discuss.elastic.co/t/kubernetes-beats-deployment-yaml-syntax-error-linked-from-support-documents-to-github/334722 "2023-05-30T22:15:52Z")
I believe there is a syntax error in the daemonset configuration in all the beats example/refrence yaml's in the elastic beats repo on GitHub. see below for the issue with the filbeat config (though it looks like that s… --- ## [Collect logs from multiple machine, what needs to be installed?](https://discuss.elastic.co/t/collect-logs-from-multiple-machine-what-needs-to-be-installed/330833)
**Author:** [@Jay\_Timbadia](https://discuss.elastic.co/u/Jay_Timbadia)\ **Replies:** 5\ **Last updated:** [April 27, 2023, 1:53pm UTC](https://discuss.elastic.co/t/collect-logs-from-multiple-machine-what-needs-to-be-installed/330833 "2023-04-27T13:53:56Z")
Continuing the discussion from How to collect the logs from multiple machines to my server efficiently?: Hi @jsoriano, really followed the chat. Just one thing, I have logs placed in different machine, so should I insta… --- ## [New Filebeat Module - ECS not supports email fields](https://discuss.elastic.co/t/new-filebeat-module-ecs-not-supports-email-fields/329339)
**Author:** [@Alexander\_A](https://discuss.elastic.co/u/Alexander_A)\ **Replies:** 0\ **Last updated:** [April 4, 2023, 2:59pm UTC](https://discuss.elastic.co/t/new-filebeat-module-ecs-not-supports-email-fields/329339 "2023-04-04T14:59:46Z")
Hi I'm trying to contribute several new filebeat modules (Postfix and Exchange) and can't use email fields. Seems filebeat tests use old ECS schema. I've tried to change ecs version to the last one but it's not working. … --- ## [IBM Cloud Metric Beat Module Contribution to the Beats Community](https://discuss.elastic.co/t/ibm-cloud-metric-beat-module-contribution-to-the-beats-community/327569)
**Author:** [@prashantaruadvi](https://discuss.elastic.co/u/prashantaruadvi)\ **Replies:** 2\ **Last updated:** [March 20, 2023, 12:02pm UTC](https://discuss.elastic.co/t/ibm-cloud-metric-beat-module-contribution-to-the-beats-community/327569 "2023-03-20T12:02:55Z")
Hi Team, We have built the IBM cloud metric beat module, we would like to contribute back to the community, can you please help us what is right way to contribute, thanks in advance. --- ## [Question about develop an integration for XML input via TCP](https://discuss.elastic.co/t/question-about-develop-an-integration-for-xml-input-via-tcp/326670)
**Author:** [@Sebastian\_Huettersen](https://discuss.elastic.co/u/Sebastian_Huettersen)\ **Replies:** 1\ **Last updated:** [March 3, 2023, 7:52am UTC](https://discuss.elastic.co/t/question-about-develop-an-integration-for-xml-input-via-tcp/326670 "2023-03-03T07:52:44Z")
I am currently trying to develop an integration that takes reports from an appliance and then indexes them in elastic. The appliance sends these XML reports via TCP. Currently, I have the problem that I can't get the d… --- ## [Filebeat internal logs are getting repeated](https://discuss.elastic.co/t/filebeat-internal-logs-are-getting-repeated/321115)
**Author:** [@Nikhitha\_Karennagari](https://discuss.elastic.co/u/Nikhitha_Karennagari)\ **Replies:** 0\ **Last updated:** [December 13, 2022, 11:25am UTC](https://discuss.elastic.co/t/filebeat-internal-logs-are-getting-repeated/321115 "2022-12-13T11:25:48Z")
Filebeat internal logs are repeating which is unwanted. 2022-12-13T11:03:51.516Z INFO log/input.go:157 Configured paths: \[/var/log/pods/7d447f4fea175a79a4bdac6296034497a897f2b94391cc73f7dadc4b5b806624/\*-json.log /var/lo… --- ## [Go get github.com/elastic/beats@v8 fails](https://discuss.elastic.co/t/go-get-github-com-elastic-beats-v8-fails/318027)
**Author:** [@Andrew\_Martinez](https://discuss.elastic.co/u/Andrew_Martinez)\ **Replies:** 0\ **Last updated:** [November 2, 2022, 4:26pm UTC](https://discuss.elastic.co/t/go-get-github-com-elastic-beats-v8-fails/318027 "2022-11-02T16:26:28Z")
Was looking at github.com/elastic/beats and saw releases for v8.\*.\*, but the go.mod file for all of those tagged versions has module github.com/elastic/beats/v7. It seems like they should be module github.com/elastic/bea… --- ## [Build your own Beat in Go](https://discuss.elastic.co/t/build-your-own-beat-in-go/316066)
**Author:** [@adrianfusco](https://discuss.elastic.co/u/adrianfusco)\ **Replies:** 4\ **Last updated:** [October 10, 2022, 5:38pm UTC](https://discuss.elastic.co/t/build-your-own-beat-in-go/316066 "2022-10-10T17:38:11Z")
I needed to send messages to Logstash using Beat from a little app I'm developing in Go. I've seen different ways to do it without doing calling services as filebeat to not create a dependency. I was taking a look to t… --- ## [ELK Log Push from Device - Proactive Monitoring](https://discuss.elastic.co/t/elk-log-push-from-device-proactive-monitoring/314880)
**Author:** [@Arunachalam\_Jayarama](https://discuss.elastic.co/u/Arunachalam_Jayarama)\ **Replies:** 1\ **Last updated:** [September 26, 2022, 3:51am UTC](https://discuss.elastic.co/t/elk-log-push-from-device-proactive-monitoring/314880 "2022-09-26T03:51:46Z")
Dear All, I am looking for a way, by which we can proactively monitor the log push from 100s of devices to ELK. Recently I came across a problem, devices were connected/configured to push the data to ELK stack, but du… --- ## [Docker beat?](https://discuss.elastic.co/t/docker-beat/313074)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 2\ **Last updated:** [August 29, 2022, 3:45am UTC](https://discuss.elastic.co/t/docker-beat/313074 "2022-08-29T03:45:42Z")
Dear all, I thought something like docker beat did exist? What is the best practice to replace the docker beat? Thanky you and kind regards! --- ## [Windows elastic-agent-8.2.3-windows-x86\_64](https://discuss.elastic.co/t/windows-elastic-agent-8-2-3-windows-x86-64/309056)
**Author:** [@mluer](https://discuss.elastic.co/u/mluer)\ **Replies:** 0\ **Last updated:** [July 6, 2022, 11:19pm UTC](https://discuss.elastic.co/t/windows-elastic-agent-8-2-3-windows-x86-64/309056 "2022-07-06T23:19:14Z")
I installed a previous version of this agent without issue. This agent has a problem with the installer and it creates an Agent Folder and copies the files, then creates another agent folder inside this one and copies i… --- ## [Configure beats to reload certificates?](https://discuss.elastic.co/t/configure-beats-to-reload-certificates/305976)
**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\ **Replies:** 2\ **Last updated:** [June 3, 2022, 6:25am UTC](https://discuss.elastic.co/t/configure-beats-to-reload-certificates/305976 "2022-06-03T06:25:05Z")
We deploy most beattypes to hosts managed by different service providers. The beats ships data to Logstash beats endpoints protected with TLS and firewalls. This setup works very well. However, changing expired TLS cert… --- ## [Beats in docker after 7.17](https://discuss.elastic.co/t/beats-in-docker-after-7-17/302429)
**Author:** [@Yustas](https://discuss.elastic.co/u/Yustas)\ **Replies:** 6\ **Last updated:** [May 23, 2022, 8:03am UTC](https://discuss.elastic.co/t/beats-in-docker-after-7-17/302429 "2022-05-23T08:03:18Z")
Hello Found problem with dockers image of beats from version 7.17 and higher. Early images was near 600 Mb size After 7.17 image baset on lightweight image near 300 Mb But in new images: no tzdate, so cant use -e T… --- ## [Create custom beat for drone sensor data](https://discuss.elastic.co/t/create-custom-beat-for-drone-sensor-data/304395)
**Author:** [@gustavofring](https://discuss.elastic.co/u/gustavofring)\ **Replies:** 0\ **Last updated:** [May 10, 2022, 11:21pm UTC](https://discuss.elastic.co/t/create-custom-beat-for-drone-sensor-data/304395 "2022-05-10T23:21:31Z")
Dear contributors, I'd like to visualize drone sensor data through kibana. But, there is no mavlink-beat for it, so I am willing to create it. But, I read that the custom beat is deprecated since ELK stack v7.16. Wha… --- ## [Hide username/password ebats](https://discuss.elastic.co/t/hide-username-password-ebats/302062)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 0\ **Last updated:** [April 11, 2022, 2:43am UTC](https://discuss.elastic.co/t/hide-username-password-ebats/302062 "2022-04-11T02:43:47Z")
right there is a password and username, how do I make the beats that I have don't include it but can still be connected? --- ## [FIlebeat modules proxy](https://discuss.elastic.co/t/filebeat-modules-proxy/301506)
**Author:** [@grumo35](https://discuss.elastic.co/u/grumo35)\ **Replies:** 2\ **Last updated:** [April 4, 2022, 1:14pm UTC](https://discuss.elastic.co/t/filebeat-modules-proxy/301506 "2022-04-04T13:14:01Z")
Hey, I was wondering if it was possible to include proxy settings for o365 module or any other module that need to perform requests online ? looks like envars and proxy\_url are not working. Is it possible to implement… --- ## [.management-beats index - can I delete it?](https://discuss.elastic.co/t/management-beats-index-can-i-delete-it/299147)
**Author:** [@lag](https://discuss.elastic.co/u/lag)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 11:30pm UTC](https://discuss.elastic.co/t/management-beats-index-can-i-delete-it/299147 "2022-03-08T23:30:14Z")
We are preparing for Elastic 8.0 and one of the critical errors we have is .management-beats index that was created prior to 7.0. We are not using this functionality and since beats central management has been discontin… --- ## [Send custom data to Elastic](https://discuss.elastic.co/t/send-custom-data-to-elastic/299060)
**Author:** [@nfeliciano](https://discuss.elastic.co/u/nfeliciano)\ **Replies:** 0\ **Last updated:** [March 8, 2022, 9:31am UTC](https://discuss.elastic.co/t/send-custom-data-to-elastic/299060 "2022-03-08T09:31:41Z")
Hello, I've been using metricbeat to monitor machine standard values successfully, like cpu memory and io. I can plot the values on the Kibana dashboards. Now I also want to send application custom data. I can extract … --- ## [Creating a Custom Beat](https://discuss.elastic.co/t/creating-a-custom-beat/295366)
**Author:** [@Markus\_Lindner](https://discuss.elastic.co/u/Markus_Lindner)\ **Replies:** 1\ **Last updated:** [January 26, 2022, 2:43pm UTC](https://discuss.elastic.co/t/creating-a-custom-beat/295366 "2022-01-26T14:43:36Z")
Hi, does someone have a current ( 2021 + ) documentation for creating a custom beat? Or an idea how I can deliver custom data to my elastic database? When i try to change a community beat, i cant make (make setup) it. … --- ## [Anyone else have tried to monitor harbor?](https://discuss.elastic.co/t/anyone-else-have-tried-to-monitor-harbor/293795)
**Author:** [@dengyun19900722](https://discuss.elastic.co/u/dengyun19900722)\ **Replies:** 1\ **Last updated:** [January 9, 2022, 10:39pm UTC](https://discuss.elastic.co/t/anyone-else-have-tried-to-monitor-harbor/293795 "2022-01-09T22:39:45Z")
Anyone else have tried to monitor harbor? [Next page](https://discuss.elastic.co/tag/beats-development/51.md?match_all_tags=true&page=1&tags%5B%5D=beats-development)