# Failure to run Filebeat On K8s Cluster - using KubeCTL **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [December 17, 2018, 2:45pm UTC](https://discuss.elastic.co/t/failure-to-run-filebeat-on-k8s-cluster-using-kubectl/161177 "2018-12-17T14:45:49Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![ranlandau](https://avatars.discourse-cdn.com/v4/letter/r/8c91f0/32.png) [@ranlandau](https://discuss.elastic.co/u/ranlandau)\ **Post date:** [December 17, 2018, 2:45pm UTC](https://discuss.elastic.co/t/failure-to-run-filebeat-on-k8s-cluster-using-kubectl/161177/1 "2018-12-17T14:45:49Z")
I've followed instructions from: [https://www.elastic.co/blog/shipping-kubernetes-logs-to-elasticsearch-with-filebeat](https://www.elastic.co/blog/shipping-kubernetes-logs-to-elasticsearch-with-filebeat) which seems pretty simple and would log my K8S cluster. now i get this: ubuntu@ip-10-0-32-203:~/kublog$ kubectl create -f filebeat-kubernetes.yaml configmap "filebeat-config" created configmap "filebeat-prospectors" created clusterrolebinding "filebeat" created clusterrole "filebeat" created serviceaccount "filebeat" created Error from server (BadRequest): error when creating "filebeat-kubernetes.yaml": DaemonSet in version "v1beta1" cannot be handled as a DaemonSet: v1beta1.DaemonSet: Spec: v1beta1.DaemonSetSpec: Template: v1.PodTemplateSpec: Spec: v1.PodSpec: Containers: v1.Container: v1.Container: Env: v1.EnvVar: v1.EnvVar: Value: ReadString: expects " or n, parsing 550 ...,"value":1... at {"apiVersion":"extensions/v1beta1","kind":"DaemonSet","metadata":{"labels":{"k8s-app":"filebeat","[kubernetes.io/cluster-service":"true"},"name":"filebeat","namespace":"kube-system"},"spec":{"template":{"metadata":{"labels":{"k8s-app":"filebeat","kubernetes.io/cluster-service":"true"}},"spec":{"containers":[{"args":["-c","/etc/filebeat.yml","-e"],"env":[{"name":"ELASTICSEARCH\_HOST","value":"elastic.dev.com"},{"name":"ELASTICSEARCH\_PORT","value":"9200"},{"name":"ELASTICSEARCH\_USERNAME","value":"elastic"},{"name":"ELASTICSEARCH\_PASSWORD","value":12345678},{"name":"ELASTIC\_CLOUD\_ID","value":null},{"name":"ELASTIC\_CLOUD\_AUTH","value":null},{"name":"POD\_NAMESPACE","valueFrom":{"fieldRef":{"fieldPath":"metadata.namespace"}}}],"image":"docker.elastic.co/beats/filebeat:6.0.1","name":"filebeat","resources":{"limits":{"memory":"200Mi"},"requests":{"cpu":"100m","memory":"100Mi"}},"securityContext":{"runAsUser":0},"volumeMounts":[{"mountPath":"/etc/filebeat.yml","name":"config","readOnly":true,"subPath":"filebeat.yml"},{"mountPath":"/usr/share/filebeat/prospectors.d","name":"prospectors","readOnly":true},{"mountPath":"/usr/share/filebeat/data","name":"data"},{"mountPath":"/var/lib/docker/containers","name":"varlibdockercontainers","readOnly":true}]}],"serviceAccountName":"filebeat","terminationGracePeriodSeconds":30,"volumes":[{"configMap":{"defaultMode":384,"name":"filebeat-config"},"name":"config"},{"hostPath":{"path":"/var/lib/docker/containers"},"name":"varlibdockercontainers"},{"configMap":{"defaultMode":384,"name":"filebeat-prospectors"},"name":"prospectors"},{"emptyDir":{},"name":"data](http://kubernetes.io/cluster-service%22:%22true%22%7D,%22name%22:%22filebeat%22,%22namespace%22:%22kube-system%22%7D,%22spec%22:%7B%22template%22:%7B%22metadata%22:%7B%22labels%22:%7B%22k8s-app%22:%22filebeat%22,%22kubernetes.io/cluster-service%22:%22true%22%7D%7D,%22spec%22:%7B%22containers%22:%5B%7B%22args%22:%5B%22-c%22,%22/etc/filebeat.yml%22,%22-e%22%5D,%22env%22:%5B%7B%22name%22:%22ELASTICSEARCH_HOST%22,%22value%22:%22elastic.dev.com%22%7D,%7B%22name%22:%22ELASTICSEARCH_PORT%22,%22value%22:%229200%22%7D,%7B%22name%22:%22ELASTICSEARCH_USERNAME%22,%22value%22:%22elastic%22%7D,%7B%22name%22:%22ELASTICSEARCH_PASSWORD%22,%22value%22:12345678%7D,%7B%22name%22:%22ELASTIC_CLOUD_ID%22,%22value%22:null%7D,%7B%22name%22:%22ELASTIC_CLOUD_AUTH%22,%22value%22:null%7D,%7B%22name%22:%22POD_NAMESPACE%22,%22valueFrom%22:%7B%22fieldRef%22:%7B%22fieldPath%22:%22metadata.namespace%22%7D%7D%7D%5D,%22image%22:%22docker.elastic.co/beats/filebeat:6.0.1%22,%22name%22:%22filebeat%22,%22resources%22:%7B%22limits%22:%7B%22memory%22:%22200Mi%22%7D,%22requests%22:%7B%22cpu%22:%22100m%22,%22memory%22:%22100Mi%22%7D%7D,%22securityContext%22:%7B%22runAsUser%22:0%7D,%22volumeMounts%22:%5B%7B%22mountPath%22:%22/etc/filebeat.yml%22,%22name%22:%22config%22,%22readOnly%22:true,%22subPath%22:%22filebeat.yml%22%7D,%7B%22mountPath%22:%22/usr/share/filebeat/prospectors.d%22,%22name%22:%22prospectors%22,%22readOnly%22:true%7D,%7B%22mountPath%22:%22/usr/share/filebeat/data%22,%22name%22:%22data%22%7D,%7B%22mountPath%22:%22/var/lib/docker/containers%22,%22name%22:%22varlibdockercontainers%22,%22readOnly%22:true%7D%5D%7D%5D,%22serviceAccountName%22:%22filebeat%22,%22terminationGracePeriodSeconds%22:30,%22volumes%22:%5B%7B%22configMap%22:%7B%22defaultMode%22:384,%22name%22:%22filebeat-config%22%7D,%22name%22:%22config%22%7D,%7B%22hostPath%22:%7B%22path%22:%22/var/lib/docker/containers%22%7D,%22name%22:%22varlibdockercontainers%22%7D,%7B%22configMap%22:%7B%22defaultMode%22:384,%22name%22:%22filebeat-prospectors%22%7D,%22name%22:%22prospectors%22%7D,%7B%22emptyDir%22:%7B%7D,%22name%22:%22data)"}]}}}} ubuntu@ip-10-0-32-203:~/kublog$ kubectl delete -f filebeat-kubernetes.yaml configmap "filebeat-config" deleted configmap "filebeat-prospectors" deleted clusterrolebinding "filebeat" deleted clusterrole "filebeat" deleted serviceaccount "filebeat" deleted Error from server (NotFound): error when stopping "filebeat-kubernetes.yaml": daemonsets.extensions "filebeat" not found ---
**Author:** ![ranlandau](https://avatars.discourse-cdn.com/v4/letter/r/8c91f0/32.png) [@ranlandau](https://discuss.elastic.co/u/ranlandau)\ **Post date:** [December 18, 2018, 12:58pm UTC](https://discuss.elastic.co/t/failure-to-run-filebeat-on-k8s-cluster-using-kubectl/161177/2 "2018-12-18T12:58:03Z")
PASSWORD WITH "" that caused it. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 15, 2019, 12:58pm UTC](https://discuss.elastic.co/t/failure-to-run-filebeat-on-k8s-cluster-using-kubectl/161177/3 "2019-01-15T12:58:05Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.