Filebeat having error in bulk index operations

Hi all,

I just started exploring ELK stack for my company and I am quite new to this. I am encountering an error, and this is the error logs:

2018/07/24 09:01:35.330832 client.go:297: DBG ES Ping(url=http://10.130.12.35:9200, timeout=1m30s)
2018/07/24 09:01:35.333296 client.go:306: DBG Ping status code: 200
2018/07/24 09:01:35.334552 bulkapi.go:130: DBG Sending bulk request to http://10.130.12.35:9200/_bulk
2018/07/24 09:01:35.335761 client.go:112: ERR Failed to perform any bulk index operations: 406 Not Acceptable
2018/07/24 09:01:35.335798 single.go:77: INFO Error publishing events (retrying): 406 Not Acceptable
2018/07/24 09:01:35.335808 single.go:154: INFO send fail
2018/07/24 09:01:35.335820 single.go:161: INFO backoff retry: 2s
2018/07/24 09:01:37.336054 client.go:297: DBG ES Ping(url=http://10.130.12.35:9200, timeout=1m30s)
2018/07/24 09:01:37.338376 client.go:306: DBG Ping status code: 200
2018/07/24 09:01:37.339709 bulkapi.go:130: DBG Sending bulk request to http://10.130.12.35:9200/_bulk
2018/07/24 09:01:37.340990 client.go:112: ERR Failed to perform any bulk index operations: 406 Not Acceptable
2018/07/24 09:01:37.341007 single.go:77: INFO Error publishing events (retrying): 406 Not Acceptable
2018/07/24 09:01:37.341017 single.go:154: INFO send fail

I am trying to send logs from a server using filebeat to the ELK stack server installed with kibana and elasticsearch. I am not sure what wrong with it. Can anybody help me with this?

P.S. I did a lot of search on the error, but I could not find a solution.

OS version: CentOS 7.5
filebeat version: filebeat version 1.3.1 (amd64)

OS version: CentOS 7.5
kibana version: 6.3
elasticsearch version: 6.3

You should really use version 6.3 of Filebeat as well, so it matches the rest of the stack. Version 1.x of Beats are not compatible with version 6.x of the stack.

1 Like

Faster than me hahhahha. :grinning:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.