# Error with packetbeat after shield installation?

**URL:** <https://discuss.elastic.co/t/error-with-packetbeat-after-shield-installation/24924>\
**Category:** Beats\
**Tags:** packetbeat\
**Created:** [July 6, 2015, 6:37am UTC](https://discuss.elastic.co/t/error-with-packetbeat-after-shield-installation/24924 "2015-07-06T06:37:38Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Akhilesh\_Anb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhilesh_anb/32/4343_2.png) [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Post date:** [July 6, 2015, 6:37am UTC](https://discuss.elastic.co/t/error-with-packetbeat-after-shield-installation/24924/1 "2015-07-06T06:37:38Z")

</div>

while im starting the packetbeat service as `/etc/init.d/packetbeat start`  
Its giving me error as:

```
output.go:64: ERR Fail to set _ttl mapping: ES returned an error: 401 Unauthorized
publish.go:232: ERR Fail to initialize elasticsearch plugin as output: ES returned an error: 401 Unauthorized
main.go:150: CRIT ES returned an error: 401 Unauthorized
   ...fail!

```

I have created a role by using shield.if it is the problem how to start packetbeat? Help me

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 6, 2015, 8:59am UTC](https://discuss.elastic.co/t/error-with-packetbeat-after-shield-installation/24924/2 "2015-07-06T08:59:52Z")

</div>

If you can provide your config, both Shield and Packetbeat, it'd be helpful 😄  
Also try enabling Shield debug mode - `shield.authc: DEBUG` in `logging.yml`.

---

<div class="post-metadata">

**Author:** ![Akhilesh\_Anb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akhilesh_anb/32/4343_2.png) [@Akhilesh\_Anb](https://discuss.elastic.co/u/Akhilesh_Anb)\
**Post date:** [July 6, 2015, 1:26pm UTC](https://discuss.elastic.co/t/error-with-packetbeat-after-shield-installation/24924/3 "2015-07-06T13:26:19Z")

</div>

This is my packetbeat.yml

> **[packetbeat.yml](http://www.mediafire.com/file/z6220a28p1gaof2/packetbeat.yml)**
>
> MediaFire is a simple to use free service that lets you put all your photos, documents, music, and video in a single place so you can access them anywhere and share them everywhere.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 6, 2015, 9:07pm UTC](https://discuss.elastic.co/t/error-with-packetbeat-after-shield-installation/24924/4 "2015-07-06T21:07:56Z")

</div>

What about Shield?

Also, something like gist/pastebin/etc is easier for people to use, rather than downloading an entire file 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 9:59pm UTC](https://discuss.elastic.co/t/error-with-packetbeat-after-shield-installation/24924/5 "2017-07-05T21:59:06Z")

</div>