# Filebeat not connecting to ES

**URL:** <https://discuss.elastic.co/t/filebeat-not-connecting-to-es/113834>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [January 2, 2018, 8:34pm UTC](https://discuss.elastic.co/t/filebeat-not-connecting-to-es/113834 "2018-01-02T20:34:51Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sudhakar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sudhakar/32/74789_2.png) [@sudhakar](https://discuss.elastic.co/u/sudhakar)\
**Post date:** [January 2, 2018, 8:34pm UTC](https://discuss.elastic.co/t/filebeat-not-connecting-to-es/113834/1 "2018-01-02T20:34:51Z")

</div>

I know this has been discussed quite a few times but would really appreciate the help on this as I have went through all the solutions but none of them would work.

Filebeat service is not connecting to ES for direct output.

This is what I have done:

1: Kibana is running and I able to connect metricbeat,heartbeat and auditbeat vis ES.  
2: Filebeat is also running as a service but when I put the index pattern "filebeat-\*" in kibana it says not matching pattern found.

I have used the command : "curl [http://localhost:9200/\_cat/indices?v](http://localhost:9200/_cat/indices?v)"

But I dont see any entry for Filebeat.

3: I used the command to export the template file: " .\filebeat.exe export template --es.version 6.1.1 | Out-File -Encoding UTF8 filebeat.template.json "

Then used the below command to install it in kibana:

" Invoke-RestMethod -Method Put -ContentType "applicat  
ion/json" -InFile filebeat.template.json -Uri [http://localhost:9200/\_template/filebeat-6.0.1](http://localhost:9200/_template/filebeat-6.0.1)"

## output: acknowledged

```
    True

```

Below is the filebeat.yml file, everything is default and i have changed nothing.

 ![filebeat](https://us1.discourse-cdn.com/elastic/original/3X/2/6/26f75e1da2f324911ba0707a8887a4f50a260979.jpg)

Please help !

Thanks  
SUDHAKAR

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [January 4, 2018, 1:22pm UTC](https://discuss.elastic.co/t/filebeat-not-connecting-to-es/113834/2 "2018-01-04T13:22:22Z")

</div>

Please format logs, scripts and other text using the `</>`-Button.

Please no images of config or log output 🙂

Have you checked the filebeat log file? Disable service and try running filebeat in foreground (in Terminal):

```auto
filebeat.exe -c <path-to-config-file> -e -v

```

---

<div class="post-metadata">

**Author:** ![sudhakar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sudhakar/32/74789_2.png) [@sudhakar](https://discuss.elastic.co/u/sudhakar)\
**Post date:** [January 4, 2018, 3:30pm UTC](https://discuss.elastic.co/t/filebeat-not-connecting-to-es/113834/3 "2018-01-04T15:30:23Z")

</div>

> [@steffens](#):
>
> filebeat.exe -c \<path-to-config-file\> -e -v

Hi Steffens,

Thanks for your quick reply:slight\_smile:.

Will take care for your suggestions .

Yes I did try to execute the service from windows terminal. But does not shows the connectivity log with ES in cmd.

I did check the logs for filebeat while running it as a service. WHat I find different is in other beats I see logging which says connected to ES but in filebeat I dont see that.

Any idea?

Thanks,  
SUDHAKAR

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [January 5, 2018, 11:28am UTC](https://discuss.elastic.co/t/filebeat-not-connecting-to-es/113834/4 "2018-01-05T11:28:05Z")

</div>

Can you please share the log output?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 2, 2018, 11:28am UTC](https://discuss.elastic.co/t/filebeat-not-connecting-to-es/113834/5 "2018-02-02T11:28:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.