# Having issue to setup filebeat
**URL:** https://discuss.elastic.co/t/having-issue-to-setup-filebeat/326235
**Category:** Beats
**Tags:** filebeat
**Created:** [February 22, 2023, 11:18pm UTC](https://discuss.elastic.co/t/having-issue-to-setup-filebeat/326235 "2023-02-22T23:18:58Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@ermilan2309](https://discuss.elastic.co/u/ermilan2309)
#### Post date: [February 22, 2023, 11:18pm UTC](https://discuss.elastic.co/t/having-issue-to-setup-filebeat/326235/1 "2023-02-22T23:18:59Z")
Hello I am having issue while setup the filebeat module for threat hunting.
This is the error I am getting..
root@wazuh:/etc/kibana# sudo filebeat setup
Overwriting ILM policy is disabled. Set `setup.ilm.overwrite: true` for enabling.
Index setup finished.
Loading dashboards (Kibana must be running and reachable)
Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to [http://0.0.0.0:5601/api/status](http://0.0.0.0:5601/api/status) fails: fail to execute the HTTP GET request: Get "[http://0.0.0.0:5601/api/status](http://0.0.0.0:5601/api/status)": dial tcp 0.0.0.0:5601: connect: connection refused (status=0). Response:
The configuration of the filebeat.yml file looks like this.
# =================================== Kibana ===================================
setup.kibana:
host: "0.0.0.0:5601"
# ---------------------------- Elasticsearch Output ----------------------------
output.elasticsearch:
# Array of hosts to connect to.
hosts: ["0.0.0.0:9200"]
ssl.certificate\_authorities: ["/etc/elasticsearch/certs/elasticsearch.crt"]
ssl.certificate: "/etc/elasticsearch/certs/elasticsearch.crt"
ssl.key: "/etc/elasticsearch/certs/elasticsearch.key"
# Protocol - either `http` (default) or `https`.
protocol: "https"
# Authentication credentials - either API key or username/password.
api\_key: "changed:changed changed"
# username: "elastic"
#password: "changed"
- ALso have total different question.
I have network traffic coming into elastiflow from multiple FWs and Can I apply threat intelligence/filebeat on to that network traffic. So that I do not have to setup filebeat onto multiple hosts.
Or might be my concept to filebeat is wrong. But please guide me what to do and how to do.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 23, 2023, 1:19am UTC](https://discuss.elastic.co/t/having-issue-to-setup-filebeat/326235/2 "2023-03-23T01:19:24Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.