Is there any error? Check the Filebeat log file.

IIRC Amazon has some specialized requirements for requests to Elasticsearch where each request needs to be signed. There is no support for this (for auth Filebeat supports standard HTTP Basic Auth or TLS client certs).



Sounds like your Amazon ES access policy is blocking the IP traffic. You'll probably need to grant anonymous access to your IP.

What's that error? Does your LS instance have access to the AWS ES instance? Are you using the AWS ES output plugin that signs the requests to ES or have you granted the IP full anonymous access.

Consider trying the Elastic Cloud service (also available from the AWS marketplace) as it uses standard HTTP basic auth over TLS for authentication.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.