# Cannot write Filebeat output to Elastic running on Docker Container on my MAC
**URL:** https://discuss.elastic.co/t/cannot-write-filebeat-output-to-elastic-running-on-docker-container-on-my-mac/339970
**Category:** Beats
**Tags:** docker, filebeat
**Created:** [August 2, 2023, 8:22pm UTC](https://discuss.elastic.co/t/cannot-write-filebeat-output-to-elastic-running-on-docker-container-on-my-mac/339970 "2023-08-02T20:22:59Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@bigdaddy0918](https://discuss.elastic.co/u/bigdaddy0918)
#### Post date: [August 2, 2023, 8:22pm UTC](https://discuss.elastic.co/t/cannot-write-filebeat-output-to-elastic-running-on-docker-container-on-my-mac/339970/1 "2023-08-02T20:22:59Z")
I have created a 3 node Elastic Docker Container using the instructions from Elastic 8.2.3, and upgraded it to 8.7.1. I am able to successfully create objects in the Elastic database, and the docker-compose command successfully created the keystores so everything is running correctly as a standalone instance.
I installed Filebeats 8.7.1 on my MAC and using CEL as my filebeat.input and am able to succesfully write the output to the console using output.console. However, when I switch the output to output.elasticsearch, nothing is written to any index on my Docker Elasticsearch. I was able to accomplish this using the 7.17.9 version of Elastic in my Docker Container, but not in the v8. I receive the following error message in the filebeats logs:
> {"log.level":"error","@timestamp":"2023-08-02T15:09:00.761-0500","log.logger":"esclientleg","log.origin":{"file.name":"transport/logging.go","file.line":38},"message":"Error dialing x509: “es01” certificate is not standards compliant","service.name":"filebeat","network":"tcp","address":"0.0.0.0:9200","ecs.version":"1.6.0"}
**strong text**
But I'm not sure if that is causing the error or not. If so, how can I bring my certificate into compliance?
---
### Author:  [@bigdaddy0918](https://discuss.elastic.co/u/bigdaddy0918)
#### Post date: [August 7, 2023, 2:39pm UTC](https://discuss.elastic.co/t/cannot-write-filebeat-output-to-elastic-running-on-docker-container-on-my-mac/339970/2 "2023-08-07T14:39:23Z")
Disregard, it turns out Filebeat v8x was populating Elastic via DataStream instead of Index. Everything is working.
---
### Author:  [@Mathemaphysics](https://discuss.elastic.co/u/Mathemaphysics)
#### Post date: [August 7, 2023, 7:07pm UTC](https://discuss.elastic.co/t/cannot-write-filebeat-output-to-elastic-running-on-docker-container-on-my-mac/339970/3 "2023-08-07T19:07:18Z")
I went through those steps too. If you don't configure it, it will automatically send to datastream.
---
### Author:  [@bigdaddy0918](https://discuss.elastic.co/u/bigdaddy0918)
#### Post date: [August 7, 2023, 7:22pm UTC](https://discuss.elastic.co/t/cannot-write-filebeat-output-to-elastic-running-on-docker-container-on-my-mac/339970/4 "2023-08-07T19:22:28Z")
Does your comment indicate you can configure it to write to an Index? The documentation didn't provide any options to DataStream.
---
### Author:  [@Alex\_Salgado-Elastic](https://discuss.elastic.co/u/Alex_Salgado-Elastic)
#### Post date: [August 22, 2023, 10:47pm UTC](https://discuss.elastic.co/t/cannot-write-filebeat-output-to-elastic-running-on-docker-container-on-my-mac/339970/5 "2023-08-22T22:47:24Z")
Could you show you filebeat.yml ? (without credentials)
---
### Author:  [@bigdaddy0918](https://discuss.elastic.co/u/bigdaddy0918)
#### Post date: [August 22, 2023, 11:24pm UTC](https://discuss.elastic.co/t/cannot-write-filebeat-output-to-elastic-running-on-docker-container-on-my-mac/339970/6 "2023-08-22T23:24:16Z")
It turns out that I was expecting the Filebeat output to be in an index as was done in v7x. I have come to realize that in v8x Filebeat now writes to a Data Stream. I was able to find the Data Stream and it is writing as expected now. Thank you for your interest in this.
Marty
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 20, 2023, 1:24am UTC](https://discuss.elastic.co/t/cannot-write-filebeat-output-to-elastic-running-on-docker-container-on-my-mac/339970/7 "2023-09-20T01:24:51Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.