# Filebeat missing authentication

**URL:** https://discuss.elastic.co/t/filebeat-missing-authentication/162151
**Category:** Beats
**Tags:** elastic-stack-security, filebeat
**Created:** [December 26, 2018, 1:40pm UTC](https://discuss.elastic.co/t/filebeat-missing-authentication/162151 "2018-12-26T13:40:54Z")
**Posts on this page:** 1
**Showing post:** 5

<div class="post-metadata">

### Author: ![sahere37](https://avatars.discourse-cdn.com/v4/letter/s/b2d939/32.png) [@sahere37](https://discuss.elastic.co/u/sahere37)
#### Post date: [December 29, 2018, 8:13am UTC](https://discuss.elastic.co/t/filebeat-missing-authentication/162151/5 "2018-12-29T08:13:48Z")

</div>

Dear steffens  
in order to create role and user, the steps mentioned in following link has been done as bellow:

> [@Filebeat cannot able to index into elasticsearch](https://discuss.elastic.co/t/filebeat-cannot-able-to-index-into-elasticsearch/76927/25):
>
> Yes Ruflin, i need to know how beats creates the indices. Also we need to know if logs path changed in filebeat configuration, how long the data will be indexed and can be able to view in kibana?

```
   POST _xpack/security/role/beat_writer
  {
    "cluster": ["manage_index_templates", "monitor"],
   "indices": [
{
  "names": ["filebeat-*", "metricbeat-*", "packetbeat-*"], 
  "privileges": ["read","write","create_index"]
}
 ]
}

```

,

```
     POST /_xpack/security/user/beat_user
     {
      "password" : "changeme",
      "roles" : ["beat_writer"],
     "full_name" : "Internal Beat User"
       }

```

filebeat.yml:  
output.elasticsearch:  
hosts: ["localhost:9200"]  
username: "beat\_user"  
password: "changeme"

but still i cannot see any indices in the "index patterns" part of kibana console (i have been logged in using elastic (admin) user).  
also i use following command to check the existence of index which still there is no "filebeat" index

```
 GET /_cat/indices

```

could you please advise me about this issue?

Also, i checked the logs of elasticsearch which everything seems ok and there is no error

---

_[View the full topic](https://discuss.elastic.co/t/filebeat-missing-authentication/162151)._