Error creating input: Can only start an input when all related states are finished

Elastic Stack Beats
1

I am using Filebeat 7.10 to send elasticsearch audit file to my cluster and I am having this error:

Error creating input: Can only start an input when all related states are finished

in filebeat.yml I disabled all the inputs:

- type: log
  enabled: false
....
....
...
 - type: filestream
  enabled: false

And then I activated Elasticsearch module : filebeat modules enable elasticsearch

and I configured elasticsearch module like that

- module: elasticsearch
  audit:
    enabled: true
    var.paths:
      - /var/log/elasticsearch/*_audit.json

Could you tell me please what the problem here !

Thanks for your help

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.