# Elasticsearch Can't load filebeat.template.json!

**URL:** <https://discuss.elastic.co/t/elasticsearch-cant-load-filebeat-template-json/84198>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [May 2, 2017, 3:54am UTC](https://discuss.elastic.co/t/elasticsearch-cant-load-filebeat-template-json/84198 "2017-05-02T03:54:18Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![shaonbean](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaonbean/32/14416_2.png) [@shaonbean](https://discuss.elastic.co/u/shaonbean)\
**Post date:** [May 2, 2017, 3:54am UTC](https://discuss.elastic.co/t/elasticsearch-cant-load-filebeat-template-json/84198/1 "2017-05-02T03:54:19Z")

</div>

# Elasticsearch Can't load filebeat.template.json!

I follow this guide:[https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-template.html](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-template.html)

use the command load filebeat.template.json:

curl -XPUT -u elastic:changeme '192.168.10.51:9200/\_template/filebeat' -H 'Content-Type: application/json' -d@/etc/filebeat/filebeat.template.json

## I use elasticsearch.repo yum install elasticsearch,logstash,.kibana,and filebeat.

my os is CentOS6.9

 ![](https://us1.discourse-cdn.com/elastic/original/3X/e/c/ec144476239139642cc659a03a26dae0499ccf32.png)

we can see it in the graph,load filebeat.template.json succeed,but I can't get the json from elasticsearch.

who can help me? tks..

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 2, 2017, 3:55am UTC](https://discuss.elastic.co/t/elasticsearch-cant-load-filebeat-template-json/84198/2 "2017-05-02T03:55:43Z")

</div>

It hasn't created any filebeat indices, is filebeat running?

---

<div class="post-metadata">

**Author:** ![shaonbean](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaonbean/32/14416_2.png) [@shaonbean](https://discuss.elastic.co/u/shaonbean)\
**Post date:** [May 2, 2017, 3:59am UTC](https://discuss.elastic.co/t/elasticsearch-cant-load-filebeat-template-json/84198/3 "2017-05-02T03:59:54Z")

</div>

filebeat is running.  
my filebeat config:

 ![](https://us1.discourse-cdn.com/elastic/original/3X/a/8/a8c61b760399690873579a0cac7adf933cd194b7.png)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 2, 2017, 6:08am UTC](https://discuss.elastic.co/t/elasticsearch-cant-load-filebeat-template-json/84198/4 "2017-05-02T06:08:56Z")

</div>

Please don't post pictures of text, they are difficult to read and some people may not be even able to see them.

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [May 9, 2017, 11:48am UTC](https://discuss.elastic.co/t/elasticsearch-cant-load-filebeat-template-json/84198/5 "2017-05-09T11:48:36Z")

</div>

I can't really read the screenshots on my screen. Can you copy'n paste the text? Use the `</>` button to format log output and text.

Have you also had a look at filebeat/logstash logs?

The template is not the index. An installed template is matched and applied to new indices being generated.

Are you sending events via logstash or directly to Elasticsearch? If you're using logstash, what's you filebeat and logstash configuration?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 6, 2017, 11:59am UTC](https://discuss.elastic.co/t/elasticsearch-cant-load-filebeat-template-json/84198/6 "2017-06-06T11:59:51Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
