Having issues with running auditbeat on ubuntu docker-compose

Hey guys this is my error log


Index setup finished.
Loading dashboards (Kibana must be running and reachable)
Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to http://kibana:5601/api/status fails: fail to execute the HTTP GET request: Get "http://kibana:5601/api/status": lookup kibana on 8.8.4.4:53: no such host. Response:

please help! This is my auditbeat.yml file

auditbeat.modules:

- module: auditd
  audit_rules: |
    -w /etc/passwd -p wa -k identity
    -a always,exit -F arch=b32 -S open,creat,truncate,ftruncate,openat,open_by_handle_at -F exit=-EPERM -k access

- module: file_integrity
  paths:
    - /bin
    - /usr/bin
    - /sbin
    - /usr/sbin
    - /etc
processors:
- add_cloud_metadata: ~

output.elasticsearch:
  hosts: http://localhost:9200

Kibana is runing! I am only having issues with auditbeat

It appears that it is failing while running setup because it cannot connect to a host named kibana. You should configure setup.kibana.host to point to the address of your Kibana. See Configure the Kibana endpoint | Auditbeat Reference [8.11] | Elastic.

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.