# Graylog sidecar + Metricbeat send message but emty message

**URL:** <https://community.graylog.org/t/graylog-sidecar-metricbeat-send-message-but-emty-message/23895>\
**Category:** Graylog Central (peer support)\
**Tags:** sidecar\
**Created:** [May 19, 2022, 9:29am UTC](https://community.graylog.org/t/graylog-sidecar-metricbeat-send-message-but-emty-message/23895 "2022-05-19T09:29:27Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![CutieCat6778](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/cutiecat6778/32/11767_2.png) [@CutieCat6778](https://community.graylog.org/u/CutieCat6778)\
**Post date:** [May 19, 2022, 9:29am UTC](https://community.graylog.org/t/graylog-sidecar-metricbeat-send-message-but-emty-message/23895/1 "2022-05-19T09:29:27Z")

</div>

**I am trying to setup metricbeat to sidecar and graylog and it connects**

Metricbeat successed to connect to sidecar and send message, but the messages it sends are just emty. I was wondering, if that is at the configuration problem, but I couldn’t find any problem.

### Generated metricbeat.conf

```yml
# Needed for Graylog
fields_under_root: true
fields.collector_node_id: term
fields.gl2_source_collector: b4af64b2-fd94-4b85-aa59-b92dd911fd39

metricbeat.config.modules:
 path: C:\Program Files\Graylog\sidecar\Metricbeat\modules.d\*.yml
 # Set to true to enable config reloading
 reload.enabled: false
 # Period on which files under path should be checked for changes
 reload.period: 10s

output.logstash:
 # The Logstash hosts
 hosts: ["10.49.130.139:1520"]

metricbeat.modules:
- module: system
metricsets:
 - cpu # CPU usage
 - memory # Memory usage
 - network # Network IO
 #- process # Per process metrics
 #- process_summary # Process summary
 - uptime # System Uptime
 - socket_summary # Socket summary
 #- core # Per CPU core usage
 - diskio # Disk IO
 - filesystem # File system usage for each mountpoint
 #- fsstat # File system summary metrics
 #- raid # Raid
 #- socket # Sockets and connection info (linux only)
 #- service # systemd service information
enabled: true
period: 10s
processes: [".*"]

```

### Output

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/1/1d2a306ec19fdfa95e451201e3e7ad6eaf882558.png)

### Thanks for your help 😄

---

<div class="post-metadata">

**Author:** ![tmacgbay](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tmacgbay/32/3878_2.png) [@tmacgbay](https://community.graylog.org/u/tmacgbay)\
**Post date:** [May 19, 2022, 2:52pm UTC](https://community.graylog.org/t/graylog-sidecar-metricbeat-send-message-but-emty-message/23895/2 "2022-05-19T14:52:58Z")

</div>

[Here](https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-reference-yml.html) is a reference file you can look at. Remember that yml files are very picky about indentation/spacing. You may have changed the text while pulling it over here to post… but as it stands, the indentation is incorrect.

Yours:

```auto
...
metricbeat.modules:
- module: system
metricsets:
 - cpu # CPU usage
 - memory # Memory usage
...

```

From Reference:

```auto
...
metricbeat.modules:
- module: system
  metricsets:
    - cpu # CPU usage
    - load # CPU load averages
    - memory # Memory usage
...

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [June 2, 2022, 2:53pm UTC](https://community.graylog.org/t/graylog-sidecar-metricbeat-send-message-but-emty-message/23895/3 "2022-06-02T14:53:43Z")

</div>

Closed on June 2, 2022, 2:53pm UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.