# Filebeat Does Not Start

**URL:** <https://discuss.elastic.co/t/filebeat-does-not-start/197599>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [August 31, 2019, 5:02pm UTC](https://discuss.elastic.co/t/filebeat-does-not-start/197599 "2019-08-31T17:02:54Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ljacobs7211](https://avatars.discourse-cdn.com/v4/letter/l/cab0a1/32.png) [@ljacobs7211](https://discuss.elastic.co/u/ljacobs7211)\
**Post date:** [August 31, 2019, 5:02pm UTC](https://discuss.elastic.co/t/filebeat-does-not-start/197599/1 "2019-08-31T17:02:55Z")

</div>

I followed the instructions to install Filebeats to ingest Suricata eve.json data into Elasticsearch. Filebeat fails on start on Ubuntu

Error Screenshot

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/e/0e4fb9b9058bfe15aa3cc333c777c6e469558169.jpeg)

The setup created the dashboards and the Elasticsearch filebeat.\* index but no data is coming in probably because Filebeat is not running. Cannot figure out why.

It is supposed to be pulling data from eve.json file and putting data into Elasticsearch but cannot see how it knows to ingest data from that file.

---

<div class="post-metadata">

**Author:** ![Michael\_Madden](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michael_madden/32/46640_2.png) [@Michael\_Madden](https://discuss.elastic.co/u/Michael_Madden)\
**Post date:** [September 3, 2019, 7:30pm UTC](https://discuss.elastic.co/t/filebeat-does-not-start/197599/2 "2019-09-03T19:30:16Z")

</div>

Hello, thanks for reaching out regarding filebeat. Could you please include the contents of your `filebeat.yml` configuration file?

Thanks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 1, 2019, 7:30pm UTC](https://discuss.elastic.co/t/filebeat-does-not-start/197599/3 "2019-10-01T19:30:17Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
