Exiting: more than one namespace configured accessing config

[meetdave2611997 (Meet Dave)]

Hi

I am using Filebeat to send logs to Logstash for filtering and then to Elasticsearch. Here I am trying to add new beats monitoring feature in the stack and I am getting the following error while starting Filebeat.

2019-01-15T19:54:13.569Z        ERROR   instance/beat.go:667    Exiting: more than one namespace configured accessing config

Here is my full filebeat.yml configuration file.

filebeat:
  prospectors:
  -
    ignore_older: 24h
    paths:
      - /var/log/messages
output:
  logstash:
    hosts: ["<host>:<port>"]
    enabled: true
    loadbalance: true
    ssl:
      certificate_authorities: ["/etc/filebeat/ca.crt"]
shipper:
logging:
xpack.monitoring:
  enabled: true
  ssl.certificate_authorities: ["/etc/filebeat/ca.crt"]
  elasticsearch:
    hosts: ["<es-host>:<es-port>"]
    username: filebeat_user
    password: filebeat_password

Please let me know what am i missing here?

Thanks,
Meet

[meetdave2611997 (Meet Dave)]

Solved!. Found configuration issue. ssl.certificate_authorities shouldn't be under xpack.monitoring. It should be under xpack.monitoring.elasticsearch.

filebeat:
  prospectors:
  -
    ignore_older: 24h
    paths:
      - /var/log/messages
output:
  logstash:
    hosts: ["<host>:<port>"]
    enabled: true
    loadbalance: true
    ssl:
      certificate_authorities: ["/etc/filebeat/ca.crt"]
shipper:
logging:
xpack.monitoring:
  enabled: true
  elasticsearch:
    hosts: ["<es-host>:<es-port>"]
    username: filebeat_user
    password: filebeat_password
    ssl.certificate_authorities: ["/etc/filebeat/ca.crt"]