Couldn't push logs to elasticsearch using filebeat

Hi Folks,

Iam running elasticsearch 6.7 as managed service in cloud. where in i want to push the logs from Kubernetes pods to elasticsearch using filebeat (6.8.5) configuration on https protocol but its giving response code 500 error. Below is the error
Preformatted text elasticsearch/elasticsearch.go:252 Error connecting to Elasticsearch at https://xxxxxx:30566: Connection marked as failed because the onConnect callback failed: cannot retrieve the elasticsearch license: error from server, response code: 500

Please find my filebeat configuration also attaching here. please help me to resolve this issue. Thanks in advance

filebeat.inputs:
- type: log
  paths:
    - /var/log/*.*
  close_inactive: 1m
  json.keys_under_root: true
  json.add_error_key: true
  processors:
  - drop_fields:
      fields: ["error"]

output.elasticsearch:
 hosts: ["xxxxxx:30566"]
 username: ${USERNAME}
 password: ${PASSWORD}
 ssl.certificate_authorities:
  - /etc/cert/certificate.pem
 index: "testing"
setup.template:
  name: "test1"
  pattern: "test1in"
  enabled: true

Hi @bharath_k,

I guess it has to do with the distribution of the managed Elasticsearch. It would be helpful to know what the provider you are running. If the cloud provider uses OSS then you should try with FIlebeat OSS too: https://www.elastic.co/downloads/past-releases#filebeat-oss

Thanks!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.