Can't "SETUP" Packet beat

Elastic Stack Beats
1

After running elasticsearch and kibana behind reverse proxy via nginx i am getting following error

# packetbeat --path.config /etc/packetbeat/ setup
Overwriting ILM policy is disabled. Set `setup.ilm.overwrite:true` for enabling.

Exiting: failed to create alias: {"error":"Incorrect HTTP method for uri [/<packetbeat-7.6.0-{now/d}-000001>] and method [PUT], allowed: [POST]","status":405}: 405 Method Not Allowed: {"error":"Incorrect HTTP method for uri [/<packetbeat-7.6.0-{now/d}-000001>] and method [PUT], allowed: [POST]","status":405}

Infact this is happening with all other beats

2

Hey @tbhaxor,

Could you try to run packetbeat setup directly to Elasticsearch, without nginx?
This way we could isolate better where is the problem.

3

Yes. However it's working with logstash. Earlier it was not even creating the index.

4

So is it working now?

If not, could you please detail your data pipeline, where are nginx and logstash? (e.g. packetbeat -> nginx -> logstash -> elasticsearch?)

Could you also check what indexes and aliases you have in your cluster?

5

No

Packetbeat -> logstash -> elasticsearch

6

Oh, so only Kibana is behind a reverse proxy then? Then it shouldn't be affecting index setup.

As mentioned in my last comment, could you also check what indexes and aliases you have in your cluster?

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.