Filebeat to AWS ES _xpack

Elastic Stack Beats
1

I appreciate that ES does not support the AWS implementation, so let me know if this question would be better on stackoverflow.
When running filebeat setup I get:
Exiting: request checking for ILM availability failed: 401 Unauthorized: {"Message":"Your request: '/_xpack' is not allowed."}
I've installed the OSS version of filebeat, version info is:
filebeat version 7.7.1 (amd64), libbeat 7.7.1 [932b273e8940575e15f10390882be205bad29e1f built 2020-05-28 14:53:26 +0000 UTC]
In my filebeat.yml I have :
monitoring.enabled: false
xpack.security.enabled: false
xpack.monitoring.enabled: false
I've tried
filebeat setup --pipelines -c /etc/filebeat/filebeat.yml
And then run the filebeat service but the debug logs still show the _xpack error message.

2

omg I think I got it. My filebeat.yml needed the following line:
setup.ilm.enabled: false

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.