# Config packetbeat for graylog error

**URL:** <https://discuss.elastic.co/t/config-packetbeat-for-graylog-error/207209>\
**Category:** Elasticsearch\
**Created:** [November 9, 2019, 11:56am UTC](https://discuss.elastic.co/t/config-packetbeat-for-graylog-error/207209 "2019-11-09T11:56:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jam\_mahmoudi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jam_mahmoudi/32/56194_2.png) [@jam\_mahmoudi](https://discuss.elastic.co/u/jam_mahmoudi)\
**Post date:** [November 9, 2019, 11:56am UTC](https://discuss.elastic.co/t/config-packetbeat-for-graylog-error/207209/1 "2019-11-09T11:56:15Z")

</div>

hi, guys  
i install packetbeat version 7.4.2 (amd64), on linux centOS 7  
but with error The following was encountered  
\*//  
[root@webgateway ~]# packetbeat test output  
elasticsearch: [http://192.100.102.25:9200](http://192.100.102.25:9200)...  
parse url... OK  
connection...  
parse host... OK  
dns lookup... OK  
addresses: 192.100.102.25  
dial up... OK  
TLS... WARN secure connection disabled  
talk to server... ERROR Connection marked as failed because the onConnect callback failed: packetbeat requires the default distribution of Elasticsearch. Please update to the default distribution of Elasticsearch for full access to all free features, or switch to the OSS distribution of packetbeat.

please guide me  
🙏

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [November 9, 2019, 1:30pm UTC](https://discuss.elastic.co/t/config-packetbeat-for-graylog-error/207209/2 "2019-11-09T13:30:57Z")

</div>

It is exactly what the error message says. It looks like you are running the OSS distribution of Elasticsearch. This default distribution of Packetbeat requires the default distribution of Elasticsearch, not OSS, so you either need to upgrade Elasticsearch or change to the OSS distribution of Packetbeat.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 8, 2019, 1:51am UTC](https://discuss.elastic.co/t/config-packetbeat-for-graylog-error/207209/4 "2019-12-08T01:51:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.