Having issues with running auditbeat on ubuntu docker-compose

Hey guys this is my error log

Index setup finished.
Loading dashboards (Kibana must be running and reachable)
Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to http://kibana:5601/api/status fails: fail to execute the HTTP GET request: Get "http://kibana:5601/api/status": lookup kibana on no such host. Response:

please help! This is my auditbeat.yml file


- module: auditd
  audit_rules: |
    -w /etc/passwd -p wa -k identity
    -a always,exit -F arch=b32 -S open,creat,truncate,ftruncate,openat,open_by_handle_at -F exit=-EPERM -k access

- module: file_integrity
    - /bin
    - /usr/bin
    - /sbin
    - /usr/sbin
    - /etc
- add_cloud_metadata: ~

  hosts: http://localhost:9200

Kibana is runing! I am only having issues with auditbeat

It appears that it is failing while running setup because it cannot connect to a host named kibana. You should configure setup.kibana.host to point to the address of your Kibana. See Configure the Kibana endpoint | Auditbeat Reference [7.14] | Elastic.

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.