# Having issues with running auditbeat on ubuntu docker-compose

**URL:** <https://discuss.elastic.co/t/having-issues-with-running-auditbeat-on-ubuntu-docker-compose/282843>\
**Category:** Beats\
**Tags:** auditbeat\
**Created:** [August 30, 2021, 5:52pm UTC](https://discuss.elastic.co/t/having-issues-with-running-auditbeat-on-ubuntu-docker-compose/282843 "2021-08-30T17:52:54Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Techy\_Vince](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/techy_vince/32/93831_2.png) [@Techy\_Vince](https://discuss.elastic.co/u/Techy_Vince)\
**Post date:** [August 30, 2021, 5:52pm UTC](https://discuss.elastic.co/t/having-issues-with-running-auditbeat-on-ubuntu-docker-compose/282843/1 "2021-08-30T17:52:54Z")

</div>

Hey guys this is my error log

```auto

Index setup finished.
Loading dashboards (Kibana must be running and reachable)
Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to http://kibana:5601/api/status fails: fail to execute the HTTP GET request: Get "http://kibana:5601/api/status": lookup kibana on 8.8.4.4:53: no such host. Response:

```

---

<div class="post-metadata">

**Author:** ![Techy\_Vince](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/techy_vince/32/93831_2.png) [@Techy\_Vince](https://discuss.elastic.co/u/Techy_Vince)\
**Post date:** [August 30, 2021, 5:57pm UTC](https://discuss.elastic.co/t/having-issues-with-running-auditbeat-on-ubuntu-docker-compose/282843/2 "2021-08-30T17:57:30Z")

</div>

please help! This is my auditbeat.yml file

```auto
auditbeat.modules:

- module: auditd
  audit_rules: |
    -w /etc/passwd -p wa -k identity
    -a always,exit -F arch=b32 -S open,creat,truncate,ftruncate,openat,open_by_handle_at -F exit=-EPERM -k access

- module: file_integrity
  paths:
    - /bin
    - /usr/bin
    - /sbin
    - /usr/sbin
    - /etc
processors:
- add_cloud_metadata: ~

output.elasticsearch:
  hosts: http://localhost:9200

```

---

<div class="post-metadata">

**Author:** ![Techy\_Vince](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/techy_vince/32/93831_2.png) [@Techy\_Vince](https://discuss.elastic.co/u/Techy_Vince)\
**Post date:** [August 30, 2021, 5:58pm UTC](https://discuss.elastic.co/t/having-issues-with-running-auditbeat-on-ubuntu-docker-compose/282843/3 "2021-08-30T17:58:39Z")

</div>

Kibana is runing! I am only having issues with auditbeat

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [August 30, 2021, 8:30pm UTC](https://discuss.elastic.co/t/having-issues-with-running-auditbeat-on-ubuntu-docker-compose/282843/4 "2021-08-30T20:30:35Z")

</div>

> [@Techy\_Vince](#):
>
> `fail to execute the HTTP GET request: Get "http://kibana:5601/api/status": lookup kibana on 8.8.4.4:53: no such host.`

It appears that it is failing while running `setup` because it cannot connect to a host named `kibana`. You should configure `setup.kibana.host` to point to the address of your Kibana. See [Configure the Kibana endpoint | Auditbeat Reference [8.11] | Elastic](https://www.elastic.co/guide/en/beats/auditbeat/current/setup-kibana-endpoint.html#_setup_kibana_host).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 27, 2021, 8:31pm UTC](https://discuss.elastic.co/t/having-issues-with-running-auditbeat-on-ubuntu-docker-compose/282843/5 "2021-09-27T20:31:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.