Hi everyone, I started a few weeks ago to work with ELK and Filebeat in a Docker system for an university project. I have working the ELK, Kibana detect everything, including Beats, now I'm configuring Filebeat to send the logs to Logstash but I have an error when Filebeat tries to send something.
ERROR [centralmgmt.event_reporter] api/event_reporter.go:90 could not send events, error: 1 error: Beat "id_number" not found
The id_number of my Filebeat and the id_number that Kibana give me when I enroll Beats are different. I read about it and I think that I can't put that number in a manual way, it's automatic, and I don't know how to resolve this.
I put my Filebeat configuration, maybe I have things wrong.
management: enabled: true period: 1m0s events_reporter: period: 30s max_batch_size: 1000 access_token: (Kibana_enroll_number) kibana: protocol: http host: localhost:5601 ssl: null timeout: 10s ignoreversion: true blacklist: output: console|file filebeat.inputs: - type: log enabled: true paths: - (...)\logs\*.log output.logstash: hosts: ["localhost:5000"] < The port usually is 5044 but I put this.