---
title: ''
description: Telegraf plugin for collecting metrics from Beat
url: https://docs.influxdata.com/telegraf/v1/input-plugins/beat/
estimated_tokens: 1429
product: Telegraf Enterprise
version: v1
publisher: InfluxData
canonical: https://docs.influxdata.com/telegraf/v1/input-plugins/beat/
date: '2026-05-21T20:10:18+02:00'
lastmod: '2026-05-21T20:10:18+02:00'
---

==========

* Telegraf v1.18.0+

[Plugin source](https://github.com/influxdata/telegraf/tree/v1.39.1/plugins/inputs/beat/)[Download configuration](https://raw.githubusercontent.com/influxdata/telegraf/refs/tags/v1.39.1/plugins/inputs/beat/sample.conf)

# Beat Input Plugin

This plugin will collect metrics from a [Beats](https://www.elastic.co/beats) instances. It is known
to work with Filebeat and Kafkabeat.

**Introduced in:** Telegraf v1.18.0**Tags:** applications**OS support:** all

## Global configuration options

Plugins support additional global and plugin configuration settings for tasks
such as modifying metrics, tags, and fields, creating aliases, and configuring
plugin ordering. See [CONFIGURATION.md](/telegraf/v1/configuration/#plugins) for more details.

## Configuration

```toml
# Read metrics exposed by Beat
[[inputs.beat]]
  ## An URL from which to read Beat-formatted JSON
  ## Default is "http://127.0.0.1:5066".
  url = "http://127.0.0.1:5066"

  ## Enable collection of the listed stats
  ## An empty list means collect all. Available options are currently
  ## "beat", "libbeat", "system" and "filebeat".
  # include = ["beat", "libbeat", "filebeat"]

  ## HTTP method
  # method = "GET"

  ## Optional HTTP headers
  # headers = {"X-Special-Header" = "Special-Value"}

  ## Override HTTP "Host" header
  # host_header = "logstash.example.com"

  ## Timeout for HTTP requests
  # timeout = "5s"

  ## Optional HTTP Basic Auth credentials
  # username = "username"
  # password = "pa$$word"

  ## Optional TLS Config
  # tls_ca = "/etc/telegraf/ca.pem"
  # tls_cert = "/etc/telegraf/cert.pem"
  # tls_key = "/etc/telegraf/key.pem"
  ## Use TLS but skip chain & host verification
  # insecure_skip_verify = false
```

## Metrics

* **beat**

  * Fields:
    * cpu\_system\_ticks
    * cpu\_system\_time\_ms
    * cpu\_total\_ticks
    * cpu\_total\_time\_ms
    * cpu\_total\_value
    * cpu\_user\_ticks
    * cpu\_user\_time\_ms
    * info\_uptime\_ms
    * memstats\_gc\_next
    * memstats\_memory\_alloc
    * memstats\_memory\_total
    * memstats\_rss

  * Tags:
    * beat\_beat
    * beat\_host
    * beat\_id
    * beat\_name
    * beat\_version

* **beat\_filebeat**

  * Fields:
    * events\_active
    * events\_added
    * events\_done
    * harvester\_closed
    * harvester\_open\_files
    * harvester\_running
    * harvester\_skipped
    * harvester\_started
    * input\_log\_files\_renamed
    * input\_log\_files\_truncated

  * Tags:
    * beat\_beat
    * beat\_host
    * beat\_id
    * beat\_name
    * beat\_version

* **beat\_libbeat**

  * Fields:
    * config\_module\_running
    * config\_module\_starts
    * config\_module\_stops
    * config\_reloads
    * output\_events\_acked
    * output\_events\_active
    * output\_events\_batches
    * output\_events\_dropped
    * output\_events\_duplicates
    * output\_events\_failed
    * output\_events\_total
    * output\_type
    * output\_read\_bytes
    * output\_read\_errors
    * output\_write\_bytes
    * output\_write\_errors
    * outputs\_kafka\_bytes\_read
    * outputs\_kafka\_bytes\_write
    * pipeline\_clients
    * pipeline\_events\_active
    * pipeline\_events\_dropped
    * pipeline\_events\_failed
    * pipeline\_events\_filtered
    * pipeline\_events\_published
    * pipeline\_events\_retry
    * pipeline\_events\_total
    * pipeline\_queue\_acked

  * Tags:
    * beat\_beat
    * beat\_host
    * beat\_id
    * beat\_name
    * beat\_version

* **beat\_system**

  * Field:
    * cpu\_cores
    * load\_1
    * load\_15
    * load\_5
    * load\_norm\_1
    * load\_norm\_15
    * load\_norm\_5

  * Tags:
    * beat\_beat
    * beat\_host
    * beat\_id
    * beat\_name
    * beat\_version

## Example Output

```text
beat,beat_beat=filebeat,beat_host=node-6,beat_id=9c1c8697-acb4-4df0-987d-28197814f788,beat_name=node-6-test,beat_version=6.4.2,host=node-6 cpu_system_ticks=656750,cpu_system_time_ms=656750,cpu_total_ticks=5461190,cpu_total_time_ms=5461198,cpu_total_value=5461190,cpu_user_ticks=4804440,cpu_user_time_ms=4804448,info_uptime_ms=342634196,memstats_gc_next=20199584,memstats_memory_alloc=12547424,memstats_memory_total=486296424792,memstats_rss=72552448 1540316047000000000
beat_libbeat,beat_beat=filebeat,beat_host=node-6,beat_id=9c1c8697-acb4-4df0-987d-28197814f788,beat_name=node-6-test,beat_version=6.4.2,host=node-6 config_module_running=0,config_module_starts=0,config_module_stops=0,config_reloads=0,output_events_acked=192404,output_events_active=0,output_events_batches=1607,output_events_dropped=0,output_events_duplicates=0,output_events_failed=0,output_events_total=192404,output_read_bytes=0,output_read_errors=0,output_write_bytes=0,output_write_errors=0,outputs_kafka_bytes_read=1118528,outputs_kafka_bytes_write=48002014,pipeline_clients=1,pipeline_events_active=0,pipeline_events_dropped=0,pipeline_events_failed=0,pipeline_events_filtered=11496,pipeline_events_published=192404,pipeline_events_retry=14,pipeline_events_total=203900,pipeline_queue_acked=192404 1540316047000000000
beat_system,beat_beat=filebeat,beat_host=node-6,beat_id=9c1c8697-acb4-4df0-987d-28197814f788,beat_name=node-6-test,beat_version=6.4.2,host=node-6 cpu_cores=32,load_1=46.08,load_15=49.82,load_5=47.88,load_norm_1=1.44,load_norm_15=1.5569,load_norm_5=1.4963 1540316047000000000
beat_filebeat,beat_beat=filebeat,beat_host=node-6,beat_id=9c1c8697-acb4-4df0-987d-28197814f788,beat_name=node-6-test,beat_version=6.4.2,host=node-6 events_active=0,events_added=3223,events_done=3223,harvester_closed=0,harvester_open_files=0,harvester_running=0,harvester_skipped=0,harvester_started=0,input_log_files_renamed=0,input_log_files_truncated=0 1540320286000000000
```