Filebeat selftest failt: missing field 'output.elasticsearch.hosts'

[leandrojmp (Leandro Pereira)]

@enp2s6

output.elasticsearch:
  # Array of hosts to connect to.
hosts: ["localhost:9200"]

  # Protocol - either `http` (default) or `https`.
protocol: "http"

  # Authentication credentials - either API key or username/password.
  #api_key: "id:api_key"
username: "elastic"
password: "elastic_pw"

Check the indentation of your yaml, if it is like you shared here it is wrong, hosts, protocol, username and password should not be on the same level (column) as the output.elasticsearch.

Compare it with the filebeat.reference.yml.

Should be something like this:

output.elasticsearch:
  hosts: ["yourhost:9200"]