Filebeat Setup error: error loading index pattern: returned 408 to import file

[radu990]

While running filebeat setup, I'm getting the following error:

PS C:\Program Files\Filebeat> .\filebeat.exe setup
Overwriting ILM policy is disabled. Set `setup.ilm.overwrite: true` for enabling.

Index setup finished.
Loading dashboards (Kibana must be running and reachable)
Exiting: 1 error: error loading index pattern: returned 408 to import file: <nil>. Response: {"statusCode":408,"error":"
Request Time-out","message":"Request Time-out"}

Any idea what is the issue? There is access through the browser to my Kibana/ElasticSearch server.

P.S. At the same time, Winlogbeat with the same setup works ok. So it's something related to Filebeat only. The Kibana/Elasticsearch output configuration is 100% same in both winlogbeat.yml and filebeat.yml.

[radu990]

Worked today on a few more servers and added Filebeats there. Got another server with the same issues, while 5-6 other servers works ok. Not sure why it happens so, as the config is identical on all the servers.

And what's the most interesting thing is that filebeat setup passed first time (but didn't work, the service was stopping itself), then it started to show the error.