# Filebeat not sending data to Elasticsearch, index\_not\_found\_exception
**URL:** https://discuss.elastic.co/t/filebeat-not-sending-data-to-elasticsearch-index-not-found-exception/298047
**Category:** Beats
**Tags:** filebeat
**Created:** [February 23, 2022, 1:59pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-data-to-elasticsearch-index-not-found-exception/298047 "2022-02-23T13:59:05Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@nspeaks](https://discuss.elastic.co/u/nspeaks)
#### Post date: [February 23, 2022, 1:59pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-data-to-elasticsearch-index-not-found-exception/298047/1 "2022-02-23T13:59:05Z")
I am using this guide: [How To Build A Security Information and Event Management (SIEM) System with Suricata and the Elastic Stack on Rocky Linux 8 | DigitalOcean](https://www.digitalocean.com/community/tutorials/how-to-build-a-security-information-and-event-management-siem-system-with-suricata-and-the-elastic-stack-on-rocky-linux-8)
to install Suricata along with ELK stack on a Rocky Linux system.
I am using
Elasticsearch 7.17
Kibana 7.17
Filebeat 7.17
Rocky Linux 8.5
As per the guide, Suricata and Filebeat are installed on one server while Elasticsearch and Kibana are installed on the other server. I am able to load Kibana but the dashboard comes up all empty.
I tried this command
`curl :9200/filebeat-/_refresh -u elastic:password`
and I get this error:
`{"error":{"root_cause":[{"type":"index_not_found_exception","reason":"no such index [filebeat-]","resource.type":"index_or_alias","resource.id":"filebeat-","index_uuid":"_na_","index":"filebeat-"}],"type":"index_not_found_exception","reason":"no such index [filebeat-]","resource.type":"index_or_alias","resource.id":"filebeat-","index_uuid":"_na_","index":"filebeat-"},"status":404}`
I tried running the following command on the ES server
`curl --user kibana_system -X GET "http://localhost:9200/_cat/indices"`
and got the following result
```auto
green open .geoip_databases WB6T5H4yReCdyG6oDZyOvw 1 0 41 0 38.6mb 38.6mb
yellow open filebeat-7.17.0-2022.02.23-000001 DQC2UcW1T36aa7BU39EuMg 1 1 0 0 226b 226b
green open .kibana_7.17.0_001 fs_zsxQkRdu8x00NWBpDqw 1 0 2187 41 3mb 3mb
green open .apm-custom-link gfwbHKdvQFWfWUz0Ep-wZQ 1 0 0 0 226b 226b
green open .apm-agent-configuration Eu8jCSzNR4GIz4IGGop_fg 1 0 0 0 226b 226b
```
Filebeat.yml: [filebeat.yml - Pastebin.com](https://pastebin.com/cF1itXC7)
Elasticsearch.yml: [elasticsearch.yml - Pastebin.com](https://pastebin.com/BRFbuwvB)
Kibana.yml: [kibana.yml - Pastebin.com](https://pastebin.com/iqCWjLdG)
I used the keystone method to configure Kibana credentials. Can anyone help what am I missing? Why can't filebeat send data or even locate the indice?
---
### Author:  [@nspeaks](https://discuss.elastic.co/u/nspeaks)
#### Post date: [February 23, 2022, 3:03pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-data-to-elasticsearch-index-not-found-exception/298047/2 "2022-02-23T15:03:45Z")
Figured out the issue. I hadn't enabled the Suricata module in Filebeat. Am closing the topic.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 23, 2022, 5:04pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-data-to-elasticsearch-index-not-found-exception/298047/3 "2022-03-23T17:04:25Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.