# Elasticsearch not receving Packetbeat after x-pack upgrade

**URL:** <https://discuss.elastic.co/t/elasticsearch-not-receving-packetbeat-after-x-pack-upgrade/128205>\
**Category:** Beats\
**Tags:** packetbeat\
**Created:** [April 16, 2018, 2:13pm UTC](https://discuss.elastic.co/t/elasticsearch-not-receving-packetbeat-after-x-pack-upgrade/128205 "2018-04-16T14:13:44Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![imparker](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/imparker/32/29887_2.png) [@imparker](https://discuss.elastic.co/u/imparker)\
**Post date:** [April 16, 2018, 2:13pm UTC](https://discuss.elastic.co/t/elasticsearch-not-receving-packetbeat-after-x-pack-upgrade/128205/1 "2018-04-16T14:13:45Z")

</div>

I've pointed the elastic search output as follows:

output.elasticsearch:  
hosts: ["Address:9200"]  
username: "elastic"  
password: "The Genereated Password"

set xpack monitoring to:

xpack.monitoring.enabled: true

I'm running the latest version of all components.

---

<div class="post-metadata">

**Author:** ![exekias](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/exekias/32/28718_2.png) [@exekias](https://discuss.elastic.co/u/exekias)\
**Post date:** [April 17, 2018, 10:11am UTC](https://discuss.elastic.co/t/elasticsearch-not-receving-packetbeat-after-x-pack-upgrade/128205/2 "2018-04-17T10:11:40Z")

</div>

Hi @imparker,

Could you please share your Packetbeat logs? We should be able to see something there if there is an issue

Best regards

---

<div class="post-metadata">

**Author:** ![imparker](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/imparker/32/29887_2.png) [@imparker](https://discuss.elastic.co/u/imparker)\
**Post date:** [April 17, 2018, 1:28pm UTC](https://discuss.elastic.co/t/elasticsearch-not-receving-packetbeat-after-x-pack-upgrade/128205/3 "2018-04-17T13:28:00Z")

</div>

Hi @exekias

How do I view packetbeat logs? If it helps, packetbeat is installed on a windows 2016 server. Thank you.

---

<div class="post-metadata">

**Author:** ![exekias](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/exekias/32/28718_2.png) [@exekias](https://discuss.elastic.co/u/exekias)\
**Post date:** [April 19, 2018, 9:50am UTC](https://discuss.elastic.co/t/elasticsearch-not-receving-packetbeat-after-x-pack-upgrade/128205/4 "2018-04-19T09:50:56Z")

</div>

They should be around `C:\ProgramData\metricbeat\Logs`

Best regards

---

<div class="post-metadata">

**Author:** ![imparker](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/imparker/32/29887_2.png) [@imparker](https://discuss.elastic.co/u/imparker)\
**Post date:** [April 19, 2018, 1:29pm UTC](https://discuss.elastic.co/t/elasticsearch-not-receving-packetbeat-after-x-pack-upgrade/128205/5 "2018-04-19T13:29:32Z")

</div>

Here's the link to the logs. I sent it here as I can't send the file through discuss itself.

> **[Firefox Send](https://send.firefox.com/download/5d0230d24e/#52gp9my6Da-4_vaGPz2BSw)**
>
> Encrypt and send files with a link that automatically expires to ensure your important documents don’t stay online forever.

---

<div class="post-metadata">

**Author:** ![exekias](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/exekias/32/28718_2.png) [@exekias](https://discuss.elastic.co/u/exekias)\
**Post date:** [April 19, 2018, 2:54pm UTC](https://discuss.elastic.co/t/elasticsearch-not-receving-packetbeat-after-x-pack-upgrade/128205/6 "2018-04-19T14:54:14Z")

</div>

Hi @imparker,

I can see this in the logs:

```auto
2018-04-19T08:23:33.120-0500	ERROR	pipeline/output.go:74	Failed to connect: Get http://10.200.1.122:9200: dial tcp 10.200.1.122:9200: connectex: No connection could be made because the target machine actively refused it.

```

After enabling X-Pack security all endpoints are upgraded to use SSL, so you should update your elasticsearch output settings to use HTTPS. Have a look to [https://www.elastic.co/guide/en/beats/packetbeat/6.2/securing-beats.html](https://www.elastic.co/guide/en/beats/packetbeat/6.2/securing-beats.html) for more details.

Best regards

---

<div class="post-metadata">

**Author:** ![imparker](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/imparker/32/29887_2.png) [@imparker](https://discuss.elastic.co/u/imparker)\
**Post date:** [April 19, 2018, 8:37pm UTC](https://discuss.elastic.co/t/elasticsearch-not-receving-packetbeat-after-x-pack-upgrade/128205/7 "2018-04-19T20:37:04Z")

</div>

Thank you.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 17, 2018, 8:37pm UTC](https://discuss.elastic.co/t/elasticsearch-not-receving-packetbeat-after-x-pack-upgrade/128205/8 "2018-05-17T20:37:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.