diff --git a/backup.yml b/backup.yml
index 4fd20fc..d48192a 100644
--- a/backup.yml
+++ b/backup.yml
@@ -107,6 +107,8 @@
         - /opt/dockerapps/appdata/crowdsec/crowdsec/parsers/s01-parse/tcpudp-flood-traefik.yaml
         - /opt/dockerapps/appdata/crowdsec/crowdsec/acquis.yaml
         - /opt/dockerapps/appdata/crowdsec/dashboard/docker/Dockerfile
+      #! filebeat (kafka)
+        - /opt/dockerapps/appdata/kafka/filebeat.yml
 
     # - name: Get a cert from an https port
     #   community.crypto.get_certificate: