# Filebeat setup. fail to create the Kibana loader

**URL:** https://discuss.elastic.co/t/filebeat-setup-fail-to-create-the-kibana-loader/264394
**Category:** Beats
**Tags:** filebeat
**Created:** [February 16, 2021, 9:13am UTC](https://discuss.elastic.co/t/filebeat-setup-fail-to-create-the-kibana-loader/264394 "2021-02-16T09:13:04Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![DavidEA](https://avatars.discourse-cdn.com/v4/letter/d/3ab097/32.png) [@DavidEA](https://discuss.elastic.co/u/DavidEA)
#### Post date: [February 16, 2021, 9:13am UTC](https://discuss.elastic.co/t/filebeat-setup-fail-to-create-the-kibana-loader/264394/1 "2021-02-16T09:13:04Z")

</div>

Please tell me, I don't know where to look.  
When installing filebeat, I do:

filebeat setup -e -E output.logstash.enabled = false -E output.elasticsearch.hosts = ['remote\_ip: 9200'] -E setup.kibana.host = remote\_ip: 5601

I get:

Exiting: fail to create the Kibana loader: Error creating Kibana client: Error creating Kibana client: fail to get the Kibana version: HTTP GET request to / api / status fails: fail to execute the HTTP GET request: Get http://remote\_ip:5601/api/status: dial tcp remote\_ip:5601: connect: connection refused. Response:.

Filebeat setup:  
setup.kibana:  
host: "remote\_ip:5601"

output.elasticsearch:  
hosts: ["remote\_ip:9200"]  
username: "username"  
password: "password!"

---

<div class="post-metadata">

### Author: ![Mario\_Castro](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mario_castro/32/35107_2.png) [@Mario\_Castro](https://discuss.elastic.co/u/Mario_Castro)
#### Post date: [February 16, 2021, 11:47am UTC](https://discuss.elastic.co/t/filebeat-setup-fail-to-create-the-kibana-loader/264394/2 "2021-02-16T11:47:48Z")

</div>

Why do you use the command line to override `filebeat.yml` values? Have you seen that you have a space between remote\_ip: and 5601? Can you curl to those `remote_ip` from the filebeat machine? what's the output of those `curl`s?

I suggest using cli overriding commands as an exception, as it's easy to write a typo.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 16, 2021, 1:48pm UTC](https://discuss.elastic.co/t/filebeat-setup-fail-to-create-the-kibana-loader/264394/3 "2021-03-16T13:48:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.