Cannot index event publisher.Event

central-management

#1

Hello World!

I followed Enroll Beats in central management | Filebeat Reference [6.6] | Elastic, yet I've noticed few of beats have following WARN in /var/logfilebeat/filebeat:

2019-02-11T16:56:45.967Z WARN elasticsearch/client.go:523 Cannot index event publisher.Event{Content:beat.Event{Timestamp:time.Time{wall:0xbf10883339619143, ext:45895108537813, loc:(*time.Location)(0x21be580)}, Meta:common.MapStr{"pipeline":"filebeat-6.6.0-system-auth-pipeline"}, Fields:common.MapStr{"event":common.MapStr{"dataset":"system.auth"}, "prospector":common.MapStr{"type":"log"}, "input":common.MapStr{"type":"log"}, "fileset":common.MapStr{"module":"system", "name":"auth"}, "host":common.MapStr{"name":"kibana17"}, "offset":398726, "log":common.MapStr{"file":common.MapStr{"path":"/var/log/auth.log"}}, "message":"Feb 11 16:56:44 kibana17 sshd[31472]: Received disconnect from 106.13.0.129 port 49328:11: Bye Bye [preauth]", "beat":common.MapStr{"hostname":"kibana17", "version":"6.6.0", "name":"kibana17"}, "source":"/var/log/auth.log"}, Private:file.State{Id:"", Finished:false, Fileinfo:(*os.fileStat)(0xc421bc7790), Source:"/var/log/auth.log", Offset:398835, Timestamp:time.Time{wall:0xbf1087a936e4817b, ext:45343066787428, loc:(*time.Location)(0x21be580)}, TTL:-1, Type:"log", Meta:map[string]string(nil), FileStateOS:file.StateOS{Inode:0x61550, Device:0x801}}}, Flags:0x1} (status=400): {"type":"illegal_argument_exception","reason":"pipeline with id [filebeat-6.6.0-system-auth-pipeline] does not exist"}

Please advise.