# Can't start filebeat on client server

**URL:** https://discuss.elastic.co/t/cant-start-filebeat-on-client-server/109417
**Category:** Beats
**Tags:** filebeat
**Created:** [November 28, 2017, 2:45pm UTC](https://discuss.elastic.co/t/cant-start-filebeat-on-client-server/109417 "2017-11-28T14:45:53Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Zurek](https://avatars.discourse-cdn.com/v4/letter/z/e495f1/32.png) [@Zurek](https://discuss.elastic.co/u/Zurek)
#### Post date: [November 28, 2017, 2:45pm UTC](https://discuss.elastic.co/t/cant-start-filebeat-on-client-server/109417/1 "2017-11-28T14:45:53Z")

</div>

So i follow this tutorial [https://www.linuxtechi.com/install-elk-stack-elasticsearch-logstash-kibana-centos7-rhel7/](https://www.linuxtechi.com/install-elk-stack-elasticsearch-logstash-kibana-centos7-rhel7/) and i have problem on client, with filebeat.

 ![filebeat](https://us1.discourse-cdn.com/elastic/original/3X/0/b/0bcc6f64bdf657fd9d5047910130c716d0bd3e5e.jpg)  
 ![journal](https://us1.discourse-cdn.com/elastic/original/3X/6/d/6df69a16efc014fcb5c0d7f0f1600370718de4c1.jpg)

conf yml file:  
[https://www.dropbox.com/s/ad2jlx7yppio84j/filebeat.yml?dl=0](https://www.dropbox.com/s/ad2jlx7yppio84j/filebeat.yml?dl=0)

Any help? ;//

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [November 28, 2017, 3:46pm UTC](https://discuss.elastic.co/t/cant-start-filebeat-on-client-server/109417/2 "2017-11-28T15:46:19Z")

</div>

I'm not familiar with that tutorial. Please try following the [official getting started guide](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-getting-started.html) for Filebeat. If you run into issues following the getting started guide let us know.

Also please do not post screenshots when the text can be copy/pasted.

---

<div class="post-metadata">

### Author: ![Zurek](https://avatars.discourse-cdn.com/v4/letter/z/e495f1/32.png) [@Zurek](https://discuss.elastic.co/u/Zurek)
#### Post date: [November 29, 2017, 10:31am UTC](https://discuss.elastic.co/t/cant-start-filebeat-on-client-server/109417/3 "2017-11-29T10:31:46Z")

</div>

My ELK server have ip address 192.168.0.1, and client address with filebeat 192.168.0.5. Where i need to change ip in confs/yml files when i make everything from this 'tutorial', because all it's complicated here... When i change elasticsearch ip to 192.168.0.1 then i can imort template to client filebeat but then kibana didn't see elasticsearch, etc etc. And i can't setup dashboard anyway, 'elasticsearch output is not configured/enabled'.

And i always need to run kibana from ./bin file?

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [November 29, 2017, 8:27pm UTC](https://discuss.elastic.co/t/cant-start-filebeat-on-client-server/109417/4 "2017-11-29T20:27:08Z")

</div>

What are you trying to accomplish? Do you have a certain type of logs you want to collect?

I recommend following the [getting started guide](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-getting-started.html). It will walk through the setup of ES, LS, and Kibana. Then it moves into pushing data using Filebeat. Usage of Lostash is optional in the getting started guide.

For your first setup I recommend deploying Elasticsearch, Kibana, and then Filebeat all on the same host. Push some logs, see it working. Then advance on to either adding Logstash into the mix (if you need to do extra parsing), moving ES and Kibana on to their own servers, or adding TLS.

Get things working in a simple setup. Then make one change at a time until you have reached your end goal.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 27, 2017, 8:27pm UTC](https://discuss.elastic.co/t/cant-start-filebeat-on-client-server/109417/5 "2017-12-27T20:27:10Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
