Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

filebeat8.7.0 error:missing field accessing '0.audit' (source:'/root/filebeat-8.7.0-linux-x86_64/modules.d/gcp.yml.disabled' #35124

Closed
gophernancy opened this issue Apr 19, 2023 · 3 comments
Labels
needs_team Indicates that the issue/PR needs a Team:* label Stalled

Comments

@gophernancy
Copy link

gophernancy commented Apr 19, 2023

  • Version: 8.7.0
  • Operating System: Linux bogon 4.19.0-240.23.11.el8_2.bclinux.x86_64 x86_64 x86_64 x86_64 GNU/Linux
  • Discuss Forum URL: none

Steps to reproduce:

  1. I downloaded filebeat from the URL: https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-8.7.0-linux-x86_64.tar.gz
  2. Modified filebeat.yml
  3. Exec "./filbeat setup -e"

When I went to reproduce the problem I found another similar error, see the picture below.

  1. When I delete the file modules.d/gcp.yml.disabled and exec "./filebeat setup -e" then it is okay.

image

@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Apr 19, 2023
@botelastic
Copy link

botelastic bot commented Apr 19, 2023

This issue doesn't have a Team:<team> label.

@Obeyed
Copy link

Obeyed commented May 6, 2023

I encountered a similar error with the disabled gcp module config. I commented out all lines that had ${path.config} which seemed to solve this issue.

@botelastic
Copy link

botelastic bot commented May 5, 2024

Hi!
We just realized that we haven't looked into this issue in a while. We're sorry!

We're labeling this issue as Stale to make it hit our filters and make sure we get back to it as soon as possible. In the meantime, it'd be extremely helpful if you could take a look at it as well and confirm its relevance. A simple comment with a nice emoji will be enough :+1.
Thank you for your contribution!

@botelastic botelastic bot added the Stalled label May 5, 2024
@botelastic botelastic bot closed this as completed Nov 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
needs_team Indicates that the issue/PR needs a Team:* label Stalled
Projects
None yet
Development

No branches or pull requests

2 participants