# FIlebeat Output Configuration Error

**URL:** https://discuss.elastic.co/t/filebeat-output-configuration-error/366175
**Category:** Beats
**Tags:** filebeat
**Created:** [September 6, 2024, 10:33pm UTC](https://discuss.elastic.co/t/filebeat-output-configuration-error/366175 "2024-09-06T22:33:19Z")
**Posts on this page:** 1
**Showing post:** 21

<div class="post-metadata">

### Author: ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [September 9, 2024, 9:33pm UTC](https://discuss.elastic.co/t/filebeat-output-configuration-error/366175/21 "2024-09-09T21:33:53Z")

</div>

1st good! Looks like it is working...

2nd please ... please... please do no past images of text they are borderline unreadable... please paste the texxgt with 3 Back ticks ````` before an after the code... see I can not cut / paste. debug search the imagezx...

The \_cat indices shows you have filebeat with 1.9M Documents...

sorry typo... please run this and paste a couple results... in text

`GET filebeat-*/_search` \<\<\<\< Note `_`

So You have data doe sure.  
Go to Kibana Discover make sure you set the timepicker correctly ... you probably have a time zone issue... so we will set a wide rang past and future...

Kibana -\> Discover -\> Data View Filebeat

Please see [this post](https://discuss.elastic.co/t/elastic-search-have-index-file-and-i-can-add-it-to-kibana-but-is-said-no-data/365862/7) it will show you how

ignore all the cloud meta data stuff...  
you can fix that with commenting these out it is just trying to get metadata that is not there...

```auto
processors:
  - add_host_metadata:
      when.not.contains.tags: forwarded
# - add_cloud_metadata: ~
# - add_docker_metadata: ~
# - add_kubernetes_metadata: ~

```

---

_[View the full topic](https://discuss.elastic.co/t/filebeat-output-configuration-error/366175)._