# Elasticsearch not loading logs from logstash and filebeat

**URL:** <https://discuss.elastic.co/t/elasticsearch-not-loading-logs-from-logstash-and-filebeat/355391>\
**Category:** Elasticsearch\
**Created:** [March 14, 2024, 10:35am UTC](https://discuss.elastic.co/t/elasticsearch-not-loading-logs-from-logstash-and-filebeat/355391 "2024-03-14T10:35:53Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![codi639](https://avatars.discourse-cdn.com/v4/letter/c/ba9def/32.png) [@codi639](https://discuss.elastic.co/u/codi639)\
**Post date:** [March 14, 2024, 1:54pm UTC](https://discuss.elastic.co/t/elasticsearch-not-loading-logs-from-logstash-and-filebeat/355391/3 "2024-03-14T13:54:57Z")

</div>

Hello,

Thanks for your reply, I guess the tutorial is too old and not enough precise for what I want.

I didn't know Elastic has a SIEM solution, but my company want to work only with **free** Open Source project...

I'm okay with building it by myself with Elastic solutions:  
[elastic-download](https://www.elastic.co/fr/downloads)

For the installation, I ran the commands:

```bash
curl https://artifacts.elastic.co/downloads/kibana/kibana-8.12.2-amd64.deb --output kibana-8.12.2-amd64.deb
curl https://artifacts.elastic.co/downloads/logstash/logstash-8.12.2-amd64.deb --output logstash-8.12.2-amd64.deb
curl https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.12.2-amd64.deb --output elasticsearch-8.12.2-amd64.deb
dpkg -i *.deb

```

But I got weird results.

```log
root@ELK-Stack:~# tail -f /var/log/elasticsearch/elasticsearch.log 
[2024-03-14T14:44:44,528][ERROR][o.e.b.Elasticsearch] [ELK-Stack] fatal exception while booting Elasticsearch
java.lang.RuntimeException: can not run elasticsearch as root
	at org.elasticsearch.bootstrap.Elasticsearch.initializeNatives(Elasticsearch.java:282) ~[elasticsearch-8.12.2.jar:?]
	at org.elasticsearch.bootstrap.Elasticsearch.initPhase2(Elasticsearch.java:167) ~[elasticsearch-8.12.2.jar:?]
	at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:72) ~[elasticsearch-8.12.2.jar:?]

```

I tried a fresh install by following this [topic](https://discuss.elastic.co/t/after-new-install-can-not-run-elasticsearch-as-root/196796/11), but got the same `can not run elasticsearch as root`

Should I just change the name of my topic as 'Struggling with ELK installation', or open a new one?

Regards

---

_[View the full topic](https://discuss.elastic.co/t/elasticsearch-not-loading-logs-from-logstash-and-filebeat/355391)._