Filebeats issue

Elastic Stack Beats
1

Trying to get IBM MQ logs.
Have success with the following commands and actions:

curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.10.1-x86_64.rpm
sudo rpm -vi filebeat-7.10.1-x86_64.rpm
Modify `/etc/filebeat/filebeat.yml`
sudo filebeat modules enable ibmmq

Get error with this command:
sudo filebeat setup
Error:

Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: [error connecting to Elasticsearch at https://51aad838bfc644e5aa2448e96aa89f7f.eu-central-1.aws.cloud.es.io:443: 401 Unauthorized: {"error":{"root_cause":[{"type":"security_exception","reason":"unable to authenticate user [elastic] for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","Bearer realm=\"security\"","ApiKey"]}}],"type":"security_exception","reason":"unable to authenticate user [elastic] for REST request [/]","header":{"WWW-Authenticate":["Basic realm=\"security\" charset=\"UTF-8\"","Bearer realm=\"security\"","ApiKey"]}},"status":401}]
2

Are you using Security in elasticsearch ? If yes you will need to provide the authentication to filebeat to work

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.