# Filebeat cannot able to index into elasticsearch **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [March 1, 2017, 7:47am UTC](https://discuss.elastic.co/t/filebeat-cannot-able-to-index-into-elasticsearch/76927 "2017-03-01T07:47:30Z")\ **Posts on this page:** 8\ **Page:** 2
**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\ **Post date:** [March 11, 2017, 5:05pm UTC](https://discuss.elastic.co/t/filebeat-cannot-able-to-index-into-elasticsearch/76927/21 "2017-03-11T17:05:19Z")
There should be at least one admin user in x-pack that has all access rights. That is the one I'm referring to. You should definitively not use this one in production but would be nice to quickly check with this user for testing. ---
**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\ **Post date:** [March 13, 2017, 7:25am UTC](https://discuss.elastic.co/t/filebeat-cannot-able-to-index-into-elasticsearch/76927/22 "2017-03-13T07:25:27Z")
Default admin user should be `elastic`. Have you tried to index any data via `curl`? Did you check `/_cat/indices` if the index exists? Have you checked Elasticsearch logs for authentication failures or failures when creating the filebeat index? ---
**Author:** ![Sujith](https://avatars.discourse-cdn.com/v4/letter/s/77aa72/32.png) [@Sujith](https://discuss.elastic.co/u/Sujith)\ **Post date:** [March 28, 2017, 7:18am UTC](https://discuss.elastic.co/t/filebeat-cannot-able-to-index-into-elasticsearch/76927/23 "2017-03-28T07:18:13Z")
yes, i can see there exists indices and i dont see any failures in elasticsearch logs. Just wanted to know how does this indices happen and where do the data or all shards located? ---
**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\ **Post date:** [March 30, 2017, 7:10am UTC](https://discuss.elastic.co/t/filebeat-cannot-able-to-index-into-elasticsearch/76927/24 "2017-03-30T07:10:15Z")
Not sure I fully understand your question above? You mean how beats creates the indices? ---
**Author:** ![Sujith](https://avatars.discourse-cdn.com/v4/letter/s/77aa72/32.png) [@Sujith](https://discuss.elastic.co/u/Sujith)\ **Post date:** [April 3, 2017, 12:10pm UTC](https://discuss.elastic.co/t/filebeat-cannot-able-to-index-into-elasticsearch/76927/25 "2017-04-03T12:10:39Z")
Yes Ruflin, i need to know how beats creates the indices. Also we need to know if logs path changed in filebeat configuration, how long the data will be indexed and can be able to view in kibana? ---
**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\ **Post date:** [April 4, 2017, 2:45pm UTC](https://discuss.elastic.co/t/filebeat-cannot-able-to-index-into-elasticsearch/76927/26 "2017-04-04T14:45:13Z")
Indices are created based on the index config in the output: [https://www.elastic.co/guide/en/beats/filebeat/current/elasticsearch-output.html#\_index](https://www.elastic.co/guide/en/beats/filebeat/current/elasticsearch-output.html#_index) I think I can't follow your second question(s)? How long you keep the data is up-to-you. I strongly recommend you to follow the getting started guide as it will show you all the steps and details: [https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-getting-started.html](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-getting-started.html) ---
**Author:** ![Sujith](https://avatars.discourse-cdn.com/v4/letter/s/77aa72/32.png) [@Sujith](https://discuss.elastic.co/u/Sujith)\ **Post date:** [April 6, 2017, 7:43am UTC](https://discuss.elastic.co/t/filebeat-cannot-able-to-index-into-elasticsearch/76927/27 "2017-04-06T07:43:26Z")
Its resolved. Thank you ruflin 🙂 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 4, 2017, 7:43am UTC](https://discuss.elastic.co/t/filebeat-cannot-able-to-index-into-elasticsearch/76927/28 "2017-05-04T07:43:47Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed. [Previous page](https://discuss.elastic.co/t/filebeat-cannot-able-to-index-into-elasticsearch/76927.md?page=1)