I'm using metricbeat 7.6.2 and trying to get elasticsearch metrics (with module).
- module: elasticsearch metricsets: - node period: 10s enabled: true hosts: ["http://internal:8081"] basepath: "/es/" headers: Authorization: ApiKey 123
In the log I'm seeing:
error determining if connected Elasticsearch node is master: HTTP error 401 in : 401 Unauthorized
When doing tcp dumps I see that there are two calls made to ES, one uses basepath and one doesn't:
GET /es/_nodes/_local HTTP/1.1 Host: internal:8081 User-Agent: Go-http-client/1.1 Authorization: ApiKey 123 Accept-Encoding: gzip HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Date: Tue, 04 Aug 2020 14:13:59 GMT Server: nginx/1.14.0 (Ubuntu) Content-Length: 17895 Connection: keep-alive
GET / HTTP/1.1 Host: internal:8081 User-Agent: Go-http-client/1.1 Authorization: ApiKey 123 Accept-Encoding: gzip HTTP/1.1 401 Unauthorized cache-control: no-cache Content-Type: application/json; charset=utf-8 Date: Tue, 04 Aug 2020 14:13:59 GMT kbn-license-sig: 40be531c422af7b7f068375b33133576e80275fb59e312e0a9f7c246484f331a kbn-name: ip-10-0-1-14 kbn-xpack-sig: aa0ee91c5d21b37ab2fb620970c860bb Server: nginx/1.14.0 (Ubuntu) Content-Length: 66 Connection: keep-alive
Does anyone know what is the second call (GET / ) and why it doesn't use the "/es/" basepath as the first one?