Failed to install template

I use two different machine: one with filebeat and other with logstash. Elasticsearch is on web service.
I configure filebeat.yml like this:

-input_type: log
- /mnt/analisilog/www.access_log
hosts: ["52.20.987.249:5044"]

the hosts is the IP of logstash machine.

input {
beats {
port => 5044 }
output {
stdout {
codec => dots {}

elasticsearch {
hosts => ["https://search-analisilog-"]
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"

i follow the guide to upload manually filebeat.template.json.
Now for comunicating of two machines i have to start logstash and filebeat but when i start logstash send me error:

[2017-07-05T16:00:41,147][ERROR][logstash.outputs.elasticsearch] Failed to install template. {:message=>"Got response code '403' contacting Elasticsearch at URL...

On Logstash machine i've installed logstash-input-beats on logstash directory.
My logstash doesn't start.
Thanks for replay

A 403 response means "forbidden" so you probably don't have permissions to post index template updates, at least not without authenticating first.

1 Like

Thank you very much

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.