# Error starting filebeat

**URL:** <https://discuss.elastic.co/t/error-starting-filebeat/80085>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 27, 2017, 7:58am UTC](https://discuss.elastic.co/t/error-starting-filebeat/80085 "2017-03-27T07:58:59Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![emilio](https://avatars.discourse-cdn.com/v4/letter/e/f475e1/32.png) [@emilio](https://discuss.elastic.co/u/emilio)\
**Post date:** [March 27, 2017, 7:59am UTC](https://discuss.elastic.co/t/error-starting-filebeat/80085/1 "2017-03-27T07:59:00Z")

</div>

Dear all,

I have such errors trying start filebeat

[loguser@container5 filebeat]$ /etc/init.d/filebeat start  
Starting filebeat: 2017/03/27 07:55:39.649381 beat.go:267: INFO Home path: [/usr/share/filebeat] Config path: [/etc/filebeat] Data path: [/var/lib/filebeat] Logs path: [/var/log/filebeat]  
2017/03/27 07:55:39.649436 beat.go:177: INFO Setup Beat: filebeat; Version: 5.2.2  
2017/03/27 07:55:39.649463 publish.go:271: INFO No outputs are defined. Please define one under the output section.  
2017/03/27 07:55:39.649498 beat.go:288: CRIT Exiting: error initializing publisher: No outputs are defined. Please define one under the output section.  
Exiting: error initializing publisher: No outputs are defined. Please define one under the output section.

Here is my output section in filebeat.yml

#----------------------------- Redis output --------------------------------  
hosts: ["10.3.2.10:6379"]  
key: "filebeat"  
db: 0  
timeout: 5

What is wrong with output?

---

<div class="post-metadata">

**Author:** ![exekias](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/exekias/32/28718_2.png) [@exekias](https://discuss.elastic.co/u/exekias)\
**Post date:** [March 27, 2017, 8:34am UTC](https://discuss.elastic.co/t/error-starting-filebeat/80085/2 "2017-03-27T08:34:34Z")

</div>

Hi @emilio,

I'm missing some context from you filebeat.yml, can you paste everything from `output.redis:`?, definitely there is something wrong in the output settings, here you have some example settings that should work:

```
output.redis:
  hosts: ["10.3.2.10:6379"]
  key: "filebeat"
  db: 0
  timeout: 5
```

---

<div class="post-metadata">

**Author:** ![emilio](https://avatars.discourse-cdn.com/v4/letter/e/f475e1/32.png) [@emilio](https://discuss.elastic.co/u/emilio)\
**Post date:** [March 27, 2017, 8:47am UTC](https://discuss.elastic.co/t/error-starting-filebeat/80085/3 "2017-03-27T08:47:55Z")

</div>

> [@exekias](#):
>
> output.redis:

Thank you very much.

I have forgotten this part of output:

output.redis:

It is working now 🙂

---

<div class="post-metadata">

**Author:** ![emilio](https://avatars.discourse-cdn.com/v4/letter/e/f475e1/32.png) [@emilio](https://discuss.elastic.co/u/emilio)\
**Post date:** [March 27, 2017, 9:21am UTC](https://discuss.elastic.co/t/error-starting-filebeat/80085/4 "2017-03-27T09:21:03Z")

</div>

So, another one errors:

2017-03-27T13:17:08+04:00 ERR Connecting error publishing events (retrying): Get [http://localhost:9200](http://localhost:9200): dial tcp [::1]:9200: getsockopt: connection refused  
2017-03-27T13:17:12+04:00 INFO No non-zero metrics in the last 30s

But, in my filebeat config

output.redis:  
hosts: ["10.3.2.10:6379"]  
key: "filebeat"  
db: 0  
timeout: 5

What is [http://localhost:9200](http://localhost:9200): dial tcp [::1]:9200??

---

<div class="post-metadata">

**Author:** ![exekias](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/exekias/32/28718_2.png) [@exekias](https://discuss.elastic.co/u/exekias)\
**Post date:** [March 27, 2017, 9:59am UTC](https://discuss.elastic.co/t/error-starting-filebeat/80085/5 "2017-03-27T09:59:00Z")

</div>

That's probably elasticsearch output, [enabled by default](https://www.elastic.co/guide/en/beats/filebeat/current/elasticsearch-output.html#_enabled_2), you can disable it manually in your settings

---

<div class="post-metadata">

**Author:** ![emilio](https://avatars.discourse-cdn.com/v4/letter/e/f475e1/32.png) [@emilio](https://discuss.elastic.co/u/emilio)\
**Post date:** [March 27, 2017, 10:17am UTC](https://discuss.elastic.co/t/error-starting-filebeat/80085/6 "2017-03-27T10:17:25Z")

</div>

How can i do that?

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [March 28, 2017, 8:22am UTC](https://discuss.elastic.co/t/error-starting-filebeat/80085/7 "2017-03-28T08:22:29Z")

</div>

remove, comment out `output.elasticsearch` section. Or add `enabled: false` to `output.elasticsearch` section.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 25, 2017, 8:22am UTC](https://discuss.elastic.co/t/error-starting-filebeat/80085/8 "2017-04-25T08:22:42Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
