Auth problem after installing X-pack on logstash

Hi community,
I have recently installed xpack on Elasticsearch,Kibana and logstash as well.
but I don't receive any data more!

this is the log which I receive,
tail -f /var/log/logstash/logstash-plain.log
[2017-12-15T10:38:39,199][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://127.0.0.1:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :error=>"Got response code '401' contacting Elasticsearch at URL 'http://127.0.0.1:9200/'"}

I have added this also in logstash.yml

xpack.monitoring.enabled: true
xpack.monitoring.elasticsearch.url: "http://localhost:9200"
xpack.monitoring.elasticsearch.username: "logstash_system"
xpack.monitoring.elasticsearch.password: "XpasswordX"

there I'm totally new with ELK, I would appreciate if you could give me some advice to solve this problem.

thanks

Hi Nima,

This seems like an authentication error. Did you set the internal user passwords as described here ?

Can you verify that the password is indeed correct by submitting a request to Elasticsearch, for example:

curl -u logstash_system -XGET 'http://localhost:9200'

and typing in the password when prompted.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.