Auth problem after installing X-pack on logstash

[Nima_van_Persien]

Hi community,
I have recently installed xpack on Elasticsearch,Kibana and logstash as well.
but I don't receive any data more!

this is the log which I receive,
tail -f /var/log/logstash/logstash-plain.log
[2017-12-15T10:38:39,199][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://127.0.0.1:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :error=>"Got response code '401' contacting Elasticsearch at URL 'http://127.0.0.1:9200/'"}

I have added this also in logstash.yml

xpack.monitoring.enabled: true
xpack.monitoring.elasticsearch.url: "http://localhost:9200"
xpack.monitoring.elasticsearch.username: "logstash_system"
xpack.monitoring.elasticsearch.password: "XpasswordX"

there I'm totally new with ELK, I would appreciate if you could give me some advice to solve this problem.

thanks

[ikakavas (Ioannis Kakavas)]

Hi Nima,

This seems like an authentication error. Did you set the internal user passwords as described here ?

Can you verify that the password is indeed correct by submitting a request to Elasticsearch, for example:

curl -u logstash_system -XGET 'http://localhost:9200'

and typing in the password when prompted.