# Filebeat having error in bulk index operations

**URL:** https://discuss.elastic.co/t/filebeat-having-error-in-bulk-index-operations/141339
**Category:** Beats
**Tags:** filebeat
**Created:** [July 24, 2018, 9:29am UTC](https://discuss.elastic.co/t/filebeat-having-error-in-bulk-index-operations/141339 "2018-07-24T09:29:19Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![rich456](https://avatars.discourse-cdn.com/v4/letter/r/a4c791/32.png) [@rich456](https://discuss.elastic.co/u/rich456)
#### Post date: [July 24, 2018, 9:29am UTC](https://discuss.elastic.co/t/filebeat-having-error-in-bulk-index-operations/141339/1 "2018-07-24T09:29:19Z")

</div>

Hi all,

I just started exploring ELK stack for my company and I am quite new to this. I am encountering an error, and this is the error logs:

2018/07/24 09:01:35.330832 client.go:297: DBG ES Ping(url=http://10.130.12.35:9200, timeout=1m30s)  
2018/07/24 09:01:35.333296 client.go:306: DBG Ping status code: 200  
2018/07/24 09:01:35.334552 bulkapi.go:130: DBG Sending bulk request to [http://10.130.12.35:9200/\_bulk](http://10.130.12.35:9200/_bulk)  
2018/07/24 09:01:35.335761 client.go:112: ERR Failed to perform any bulk index operations: 406 Not Acceptable  
2018/07/24 09:01:35.335798 single.go:77: INFO Error publishing events (retrying): 406 Not Acceptable  
2018/07/24 09:01:35.335808 single.go:154: INFO send fail  
2018/07/24 09:01:35.335820 single.go:161: INFO backoff retry: 2s  
2018/07/24 09:01:37.336054 client.go:297: DBG ES Ping(url=http://10.130.12.35:9200, timeout=1m30s)  
2018/07/24 09:01:37.338376 client.go:306: DBG Ping status code: 200  
2018/07/24 09:01:37.339709 bulkapi.go:130: DBG Sending bulk request to [http://10.130.12.35:9200/\_bulk](http://10.130.12.35:9200/_bulk)  
2018/07/24 09:01:37.340990 client.go:112: ERR Failed to perform any bulk index operations: 406 Not Acceptable  
2018/07/24 09:01:37.341007 single.go:77: INFO Error publishing events (retrying): 406 Not Acceptable  
2018/07/24 09:01:37.341017 single.go:154: INFO send fail

I am trying to send logs from a server using filebeat to the ELK stack server installed with kibana and elasticsearch. I am not sure what wrong with it. Can anybody help me with this?

P.S. I did a lot of search on the error, but I could not find a solution.

OS version: CentOS 7.5  
filebeat version: filebeat version 1.3.1 (amd64)

OS version: CentOS 7.5  
kibana version: 6.3  
elasticsearch version: 6.3

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [July 24, 2018, 9:31am UTC](https://discuss.elastic.co/t/filebeat-having-error-in-bulk-index-operations/141339/2 "2018-07-24T09:31:57Z")

</div>

You should really use version 6.3 of Filebeat as well, so it matches the rest of the stack. Version 1.x of Beats are [not compatible with version 6.x of the stack](https://www.elastic.co/support/matrix#matrix_compatibility).

---

<div class="post-metadata">

### Author: ![Charaf\_Ahmed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/charaf_ahmed/32/30467_2.png) [@Charaf\_Ahmed](https://discuss.elastic.co/u/Charaf_Ahmed)
#### Post date: [July 24, 2018, 9:33am UTC](https://discuss.elastic.co/t/filebeat-having-error-in-bulk-index-operations/141339/3 "2018-07-24T09:33:08Z")

</div>

Faster than me hahhahha. 😀

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 21, 2018, 9:33am UTC](https://discuss.elastic.co/t/filebeat-having-error-in-bulk-index-operations/141339/4 "2018-08-21T09:33:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.