# Auditbeat Connection Issue ElasticSearch

**URL:** <https://discuss.elastic.co/t/auditbeat-connection-issue-elasticsearch/230186>\
**Category:** Beats\
**Tags:** auditbeat\
**Created:** [April 28, 2020, 1:49pm UTC](https://discuss.elastic.co/t/auditbeat-connection-issue-elasticsearch/230186 "2020-04-28T13:49:17Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dcho99](https://avatars.discourse-cdn.com/v4/letter/d/ccd318/32.png) [@dcho99](https://discuss.elastic.co/u/dcho99)\
**Post date:** [April 28, 2020, 1:49pm UTC](https://discuss.elastic.co/t/auditbeat-connection-issue-elasticsearch/230186/1 "2020-04-28T13:49:18Z")

</div>

I'm fairly new to Elastic. When configuring my auditbeats.yml file and testing it I get this error:

Exiting: Couldn't connect to any of the configured Elasticsearch hosts. Errors: [Error connection to Elasticsearch [http://xxxxx:9200](http://xxxxx:9200): Connection marked as failed because the onConnect callback failed: Auditbeat required the default distribution of Elasticsearch. Please update the default distribution of Elasticsearch for full access to all free features, or switch to the OSS distribution of Auditbeat. ]

I'm using a Bitnami ELK VM distribution. Has anyone else had this problem?

I am using Elasticsearch version 7.6.0 and Auditbeat version 7.6.0 as well.

* * *

When running the auditbeat -e -d "\*" I get an error stating: "Exiting: data path already locked by another beat"

Thanks

---

<div class="post-metadata">

**Author:** ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)\
**Post date:** [April 28, 2020, 3:20pm UTC](https://discuss.elastic.co/t/auditbeat-connection-issue-elasticsearch/230186/2 "2020-04-28T15:20:57Z")

</div>

It seems that you are using the Basic version of Auditbeat. But the license of the Elasticsearch you are trying to connect to is Open source, not Basic.

You need to run the OSS version of Auditbeat in order to connect to Bitnami ELK. Alternatively, you can switch to Elastic Cloud, so you can get access to all Basic features of Auditbeat.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 19, 2020, 3:21pm UTC](https://discuss.elastic.co/t/auditbeat-connection-issue-elasticsearch/230186/3 "2020-05-19T15:21:00Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.