# Filebeat setup error message

**URL:** <https://discuss.elastic.co/t/filebeat-setup-error-message/176750>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [April 13, 2019, 10:38pm UTC](https://discuss.elastic.co/t/filebeat-setup-error-message/176750 "2019-04-13T22:38:15Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![KK23](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kk23/32/43993_2.png) [@KK23](https://discuss.elastic.co/u/KK23)\
**Post date:** [April 13, 2019, 10:38pm UTC](https://discuss.elastic.co/t/filebeat-setup-error-message/176750/1 "2019-04-13T22:38:15Z")

</div>

Hi,  
I am getting below error with file beat setup  
sudo filebeat setup gives

"Exiting: 1 error: Error checking if xpack is available: 500 Internal Server Error: {"error":{"root\_cause":[{"type":"security\_exception","reason":"Unexpected exception indices:admin/get"}],"type":"security\_exception","reason":"Unexpected exception indices:admin/get"},"status":500}"  
appreciate if someone can assist

filebeat.yml has this set but its not helping  
xpack.monitoring.enabled: false

Thanks,  
KK

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 14, 2019, 5:01am UTC](https://discuss.elastic.co/t/filebeat-setup-error-message/176750/2 "2019-04-14T05:01:35Z")

</div>

It sounds like that your cluster is protected. So you probably need to enter your credentials in the filebeat configuration?

I'm moving your question to #beats:filebeat

---

<div class="post-metadata">

**Author:** ![KK23](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kk23/32/43993_2.png) [@KK23](https://discuss.elastic.co/u/KK23)\
**Post date:** [April 14, 2019, 5:39am UTC](https://discuss.elastic.co/t/filebeat-setup-error-message/176750/3 "2019-04-14T05:39:58Z")

</div>

do you mean in filebeat.yml the elastic stack authentication details, if so i had already set it up?  
even then its not working  
😞

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 12, 2019, 5:40am UTC](https://discuss.elastic.co/t/filebeat-setup-error-message/176750/4 "2019-05-12T05:40:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.