# Filebeat setup not work

**URL:** <https://discuss.elastic.co/t/filebeat-setup-not-work/140897>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [July 20, 2018, 1:11pm UTC](https://discuss.elastic.co/t/filebeat-setup-not-work/140897 "2018-07-20T13:11:05Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![weyderfs](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/weyderfs/32/32935_2.png) [@weyderfs](https://discuss.elastic.co/u/weyderfs)\
**Post date:** [July 20, 2018, 1:11pm UTC](https://discuss.elastic.co/t/filebeat-setup-not-work/140897/1 "2018-07-20T13:11:05Z")

</div>

Hi guys,  
I'm trying monitoring syslogs in my ELK server, but when try run _filebeat setup_ happens the error bellow:

```
Loaded index template
Loading dashboards (Kibana must be running and reachable)
Exiting: Error importing Kibana dashboards: fail to create the Kibana loader: Error creating Kibana client: Error creating Kibana client: fail to get the Kibana version: HTTP GET request to /api/status fails: fail to execute the HTTP GET request: Get http://localhost:5601/api/status: dial tcp [::1]:5601: getsockopt: connection refused. Response: 

```

Follow my filebeat.yml:

```
filebeat.inputs:
- type: log
  enabled: true
  paths:
- /var/log/*.log
output.elasticsearch:
    hosts: "scutum:9200"
setup.kibana:
    hosts: "scutum:5601"
```

---

<div class="post-metadata">

**Author:** ![kskubala](https://avatars.discourse-cdn.com/v4/letter/k/c5a1d2/32.png) [@kskubala](https://discuss.elastic.co/u/kskubala)\
**Post date:** [July 20, 2018, 2:45pm UTC](https://discuss.elastic.co/t/filebeat-setup-not-work/140897/2 "2018-07-20T14:45:34Z")

</div>

Add http:// prefix.  
setup.kibana:  
hosts: "[http://scutum:5601](http://scutum:5601)"

---

<div class="post-metadata">

**Author:** ![weyderfs](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/weyderfs/32/32935_2.png) [@weyderfs](https://discuss.elastic.co/u/weyderfs)\
**Post date:** [July 20, 2018, 6:45pm UTC](https://discuss.elastic.co/t/filebeat-setup-not-work/140897/3 "2018-07-20T18:45:17Z")

</div>

I change, but error again:

```
$ filebeat setup
Loaded index template
Loading dashboards (Kibana must be running and reachable)
Exiting: Error importing Kibana dashboards: fail to create the Kibana loader: Error creating Kibana client: Error creating Kibana client: fail to get the Kibana version: HTTP GET request to /api/status fails: fail to execute the HTTP GET request: Get http://localhost:5601/api/status: dial tcp [::1]:5601: getsockopt: connection refused. Response: .
```

---

<div class="post-metadata">

**Author:** ![weyderfs](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/weyderfs/32/32935_2.png) [@weyderfs](https://discuss.elastic.co/u/weyderfs)\
**Post date:** [July 23, 2018, 7:50pm UTC](https://discuss.elastic.co/t/filebeat-setup-not-work/140897/4 "2018-07-23T19:50:02Z")

</div>

I run filebeat with argument "-e" and following output:

```
 /usr/share/filebeat/bin/filebeat -e setup
2018-07-23T16:48:06.884-0300 INFO instance/beat.go:492 Home path: [/usr/share/filebeat/bin] Config path: [/usr/share/filebeat/bin] Data path: [/usr/share/filebeat/bin/data] Logs path: [/usr/share/filebeat/bin/logs]
2018-07-23T16:48:06.887-0300 INFO instance/beat.go:499 Beat UUID: 593be155-35f9-4f94-b2ab-d352acd5dc0e
2018-07-23T16:48:06.887-0300 INFO [beat] instance/beat.go:716 Beat info {"system_info": {"beat": {"path": {"config": "/usr/share/filebeat/bin", "data": "/usr/share/filebeat/bin/data", "home": "/usr/share/filebeat/bin", "logs": "/usr/share/filebeat/bin/logs"}, "type": "filebeat", "uuid": "593be155-35f9-4f94-b2ab-d352acd5dc0e"}}}
2018-07-23T16:48:06.889-0300 INFO [beat] instance/beat.go:725 Build info {"system_info": {"build": {"commit": "ed42bb85e72ae58cc09748dc1825159713e0ffd4", "libbeat": "6.3.1", "time": "2018-06-29T21:09:35.000Z", "version": "6.3.1"}}}
2018-07-23T16:48:06.889-0300 INFO [beat] instance/beat.go:728 Go runtime info {"system_info": {"go": {"os":"linux","arch":"amd64","max_procs":4,"version":"go1.9.4"}}}
2018-07-23T16:48:06.902-0300 INFO [beat] instance/beat.go:732 Host info {"system_info": {"host": {"architecture":"x86_64","boot_time":"2018-07-18T17:01:15-03:00","containerized":true,"hostname":"scutum.microservicebnu.local","ips":["127.0.0.1/8","::1/128","192.168.10.141/24","fe80::215:5dff:fe0a:f788/64"],"kernel_version":"3.10.0-862.6.3.el7.x86_64","mac_addresses":["00:15:5d:0a:f7:88"],"os":{"family":"redhat","platform":"centos","name":"CentOS Linux","version":"7 (Core)","major":7,"minor":5,"patch":1804,"codename":"Core"},"timezone":"-03","timezone_offset_sec":-10800,"id":"410799ef614b4ceb91bbffb9719b83db"}}}
2018-07-23T16:48:06.909-0300 INFO [beat] instance/beat.go:761 Process info {"system_info": {"process": {"capabilities": {"inheritable":null,"permitted":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend"],"effective":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend"],"bounding":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend"],"ambient":null}, "cwd": "/etc/filebeat", "exe": "/usr/share/filebeat/bin/filebeat", "name": "filebeat", "pid": 16933, "ppid": 16046, "seccomp": {"mode":"disabled"}, "start_time": "2018-07-23T16:48:06.250-0300"}}}
2018-07-23T16:48:06.910-0300 INFO instance/beat.go:225 Setup Beat: filebeat; Version: 6.3.1
2018-07-23T16:48:06.913-0300 INFO elasticsearch/client.go:145 Elasticsearch url: http://scutum:9200
2018-07-23T16:48:06.921-0300 INFO pipeline/module.go:81 Beat name: scutum.microservicebnu.local
2018-07-23T16:48:06.923-0300 ERROR fileset/modules.go:101 Not loading modules. Module directory not found: /usr/share/filebeat/bin/module
2018-07-23T16:48:06.924-0300 INFO elasticsearch/client.go:145 Elasticsearch url: http://scutum:9200
2018-07-23T16:48:06.959-0300 INFO elasticsearch/client.go:690 Connected to Elasticsearch version 6.3.1
2018-07-23T16:48:06.967-0300 INFO template/load.go:73 Template already exists and will not be overwritten.
Loaded index template
Loading dashboards (Kibana must be running and reachable)
2018-07-23T16:48:06.968-0300 INFO elasticsearch/client.go:145 Elasticsearch url: http://scutum:9200
2018-07-23T16:48:06.995-0300 INFO elasticsearch/client.go:690 Connected to Elasticsearch version 6.3.1
2018-07-23T16:48:06.996-0300 INFO kibana/client.go:90 Kibana url: http://localhost:5601
2018-07-23T16:48:07.008-0300 ERROR instance/beat.go:691 Exiting: Error importing Kibana dashboards: fail to create the Kibana loader: Error creating Kibana client: Error creating Kibana client: fail to get the Kibana version: HTTP GET request to /api/status fails: fail to execute the HTTP GET request: Get http://localhost:5601/api/status: dial tcp 127.0.0.1:5601: getsockopt: connection refused. Response: .
Exiting: Error importing Kibana dashboards: fail to create the Kibana loader: Error creating Kibana client: Error creating Kibana client: fail to get the Kibana version: HTTP GET request to /api/status fails: fail to execute the HTTP GET request: Get http://localhost:5601/api/status: dial tcp 127.0.0.1:5601: getsockopt: connection refused. Response: .
```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 20, 2018, 7:50pm UTC](https://discuss.elastic.co/t/filebeat-setup-not-work/140897/5 "2018-08-20T19:50:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
