Filebeat 7.6.0 oss can't work with AWS Elasticsearch Service because it tries to access xpack

Elastic Stack Beats
1

Have

  • AWS ES instance open to world
  • AWS EC2 instance for testing
  • FileBeat OSS 7.6.0 installed from OSS-7.x Debian repo
    on 'filebeat setup -e --template'
    Got
    2020-02-27T09:06:00.826Z INFO elasticsearch/client.go:757 Attempting to connect to Elasticsearch version 7.1.1
    Overwriting ILM policy is disabled. Set setup.ilm.overwrite:true for enabling.
    2020-02-27T09:06:00.829Z ERROR instance/beat.go:933 Exiting: request checking for ILM availability failed: 401 Unauthorized: {"Message":"Your request: '/_xpack' is not allowed."}

Expected that filebeat will check '"build_flavor" : "oss"' and not try to access /_xpack endpoint

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.