I run filebeat with argument "-e" and following output:
/usr/share/filebeat/bin/filebeat -e setup
2018-07-23T16:48:06.884-0300 INFO instance/beat.go:492 Home path: [/usr/share/filebeat/bin] Config path: [/usr/share/filebeat/bin] Data path: [/usr/share/filebeat/bin/data] Logs path: [/usr/share/filebeat/bin/logs]
2018-07-23T16:48:06.887-0300 INFO instance/beat.go:499 Beat UUID: 593be155-35f9-4f94-b2ab-d352acd5dc0e
2018-07-23T16:48:06.887-0300 INFO [beat] instance/beat.go:716 Beat info {"system_info": {"beat": {"path": {"config": "/usr/share/filebeat/bin", "data": "/usr/share/filebeat/bin/data", "home": "/usr/share/filebeat/bin", "logs": "/usr/share/filebeat/bin/logs"}, "type": "filebeat", "uuid": "593be155-35f9-4f94-b2ab-d352acd5dc0e"}}}
2018-07-23T16:48:06.889-0300 INFO [beat] instance/beat.go:725 Build info {"system_info": {"build": {"commit": "ed42bb85e72ae58cc09748dc1825159713e0ffd4", "libbeat": "6.3.1", "time": "2018-06-29T21:09:35.000Z", "version": "6.3.1"}}}
2018-07-23T16:48:06.889-0300 INFO [beat] instance/beat.go:728 Go runtime info {"system_info": {"go": {"os":"linux","arch":"amd64","max_procs":4,"version":"go1.9.4"}}}
2018-07-23T16:48:06.902-0300 INFO [beat] instance/beat.go:732 Host info {"system_info": {"host": {"architecture":"x86_64","boot_time":"2018-07-18T17:01:15-03:00","containerized":true,"hostname":"scutum.microservicebnu.local","ips":["127.0.0.1/8","::1/128","192.168.10.141/24","fe80::215:5dff:fe0a:f788/64"],"kernel_version":"3.10.0-862.6.3.el7.x86_64","mac_addresses":["00:15:5d:0a:f7:88"],"os":{"family":"redhat","platform":"centos","name":"CentOS Linux","version":"7 (Core)","major":7,"minor":5,"patch":1804,"codename":"Core"},"timezone":"-03","timezone_offset_sec":-10800,"id":"410799ef614b4ceb91bbffb9719b83db"}}}
2018-07-23T16:48:06.909-0300 INFO [beat] instance/beat.go:761 Process info {"system_info": {"process": {"capabilities": {"inheritable":null,"permitted":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend"],"effective":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend"],"bounding":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend"],"ambient":null}, "cwd": "/etc/filebeat", "exe": "/usr/share/filebeat/bin/filebeat", "name": "filebeat", "pid": 16933, "ppid": 16046, "seccomp": {"mode":"disabled"}, "start_time": "2018-07-23T16:48:06.250-0300"}}}
2018-07-23T16:48:06.910-0300 INFO instance/beat.go:225 Setup Beat: filebeat; Version: 6.3.1
2018-07-23T16:48:06.913-0300 INFO elasticsearch/client.go:145 Elasticsearch url: http://scutum:9200
2018-07-23T16:48:06.921-0300 INFO pipeline/module.go:81 Beat name: scutum.microservicebnu.local
2018-07-23T16:48:06.923-0300 ERROR fileset/modules.go:101 Not loading modules. Module directory not found: /usr/share/filebeat/bin/module
2018-07-23T16:48:06.924-0300 INFO elasticsearch/client.go:145 Elasticsearch url: http://scutum:9200
2018-07-23T16:48:06.959-0300 INFO elasticsearch/client.go:690 Connected to Elasticsearch version 6.3.1
2018-07-23T16:48:06.967-0300 INFO template/load.go:73 Template already exists and will not be overwritten.
Loaded index template
Loading dashboards (Kibana must be running and reachable)
2018-07-23T16:48:06.968-0300 INFO elasticsearch/client.go:145 Elasticsearch url: http://scutum:9200
2018-07-23T16:48:06.995-0300 INFO elasticsearch/client.go:690 Connected to Elasticsearch version 6.3.1
2018-07-23T16:48:06.996-0300 INFO kibana/client.go:90 Kibana url: http://localhost:5601
2018-07-23T16:48:07.008-0300 ERROR instance/beat.go:691 Exiting: Error importing Kibana dashboards: fail to create the Kibana loader: Error creating Kibana client: Error creating Kibana client: fail to get the Kibana version: HTTP GET request to /api/status fails: fail to execute the HTTP GET request: Get http://localhost:5601/api/status: dial tcp 127.0.0.1:5601: getsockopt: connection refused. Response: .
Exiting: Error importing Kibana dashboards: fail to create the Kibana loader: Error creating Kibana client: Error creating Kibana client: fail to get the Kibana version: HTTP GET request to /api/status fails: fail to execute the HTTP GET request: Get http://localhost:5601/api/status: dial tcp 127.0.0.1:5601: getsockopt: connection refused. Response: .