# Heartbeat-Elastic unable to get data

**URL:** <https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463>\
**Category:** Beats\
**Tags:** heartbeat\
**Created:** [November 24, 2020, 8:23am UTC](https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463 "2020-11-24T08:23:40Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![skyluke.1987](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Post date:** [November 24, 2020, 8:23am UTC](https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463/1 "2020-11-24T08:23:41Z")

</div>

Hi I have upgraded my Heartbeat-elastic to 7.9.1. But later on all the data are not coming in.

Below are the ELSK version I am having:

Kibana - 7.7.0  
Filebeat - 7.7.0  
Logstash - 7.9.1

Please advise how can I debug and resolve this issue. Thanks

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 25, 2020, 1:49am UTC](https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463/2 "2020-11-25T01:49:10Z")

</div>

What do your Heartbeat logs show?  
Does Heartbeat send to Logstash, or directly to Elasticsearch?  
Are you going to upgrade the rest of your stack?

---

<div class="post-metadata">

**Author:** ![skyluke.1987](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Post date:** [November 25, 2020, 8:38am UTC](https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463/3 "2020-11-25T08:38:21Z")

</div>

Hi some of the log:

```
2020-11-25T16:34:02.530+0800 ERROR [publisher_pipeline_output] pipeline/output.go:154 Failed to connect to backoff(elasticsearch(http://10.0.106.144:9200)): 401 Unauthorized: {"error":{"root_cause":[{"type":"security_exception","reason":"failed to authenticate user [elastic]","header":{"WWW-Authenticate":"Basic realm=\"security\" charset=\"UTF-8\""}}],"type":"security_exception","reason":"failed to authenticate user [elastic]","header":{"WWW-Authenticate":"Basic realm=\"security\" charset=\"UTF-8\""}},"status":401}
2020-11-25T16:34:34.173+0800 ERROR [publisher_pipeline_output] pipeline/output.go:154 Failed to connect to backoff(elasticsearch(http://10.0.106.144:9200)): 401 Unauthorized: {"error":{"root_cause":[{"type":"security_exception","reason":"failed to authenticate user [elastic]","header":{"WWW-Authenticate":"Basic realm=\"security\" charset=\"UTF-8\""}}],"type":"security_exception","reason":"failed to authenticate user [elastic]","header":{"WWW-Authenticate":"Basic realm=\"security\" charset=\"UTF-8\""}},"status":401}
2020-11-25T16:35:34.107+0800 ERROR [publisher_pipeline_output] pipeline/output.go:154 Failed to connect to backoff(elasticsearch(http://10.0.106.144:9200)): 401 Unauthorized: {"error":{"root_cause":[{"type":"security_exception","reason":"failed to authenticate user [elastic]","header":{"WWW-Authenticate":"Basic realm=\"security\" charset=\"UTF-8\""}}],"type":"security_exception","reason":"failed to authenticate user [elastic]","header":{"WWW-Authenticate":"Basic realm=\"security\" charset=\"UTF-8\""}},"status":401}
2020-11-25T16:36:20.746+0800 ERROR [publisher_pipeline_output] pipeline/output.go:154 Failed to connect to backoff(elasticsearch(http://10.0.106.144:9200)): 401 Unauthorized: {"error":{"root_cause":[{"type":"security_exception","reason":"failed to authenticate user [elastic]","header":{"WWW-Authenticate":"Basic realm=\"security\" charset=\"UTF-8\""}}],"type":"security_exception","reason":"failed to authenticate user [elastic]","header":{"WWW-Authenticate":"Basic realm=\"security\" charset=\"UTF-8\""}},"status":401}
2020-11-25T16:36:51.896+0800 ERROR [publisher_pipeline_output] pipeline/output.go:154 Failed to connect to backoff(elasticsearch(http://10.0.106.144:9200)): 401 Unauthorized: {"error":{"root_cause":[{"type":"security_exception","reason":"failed to authenticate user [elastic]","header":{"WWW-Authenticate":"Basic realm=\"security\" charset=\"UTF-8\""}}],"type":"security_exception","reason":"failed to authenticate user [elastic]","header":{"WWW-Authenticate":"Basic realm=\"security\" charset=\"UTF-8\""}},"status":401}

```

Directly to Elasticsearch. and I am trying not to upgrade the ELKS if possible

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 25, 2020, 10:04am UTC](https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463/4 "2020-11-25T10:04:31Z")

</div>

> [@skyluke.1987](#):
>
> `failed to authenticate user [elastic]`

That's pretty relevant, have you checked that?

---

<div class="post-metadata">

**Author:** ![skyluke.1987](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Post date:** [November 26, 2020, 3:20am UTC](https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463/5 "2020-11-26T03:20:07Z")

</div>

I notice when I curl the ES it got error. May I know why?

Is there any place I need to enter the user credentials? Its already in the kibana.yml. I notice this password keep disappearing.

---

<div class="post-metadata">

**Author:** ![skyluke.1987](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Post date:** [November 30, 2020, 3:33am UTC](https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463/6 "2020-11-30T03:33:38Z")

</div>

Hi I need some help to start my Elasticsearch. It says I have some missing plugins.

My question also is why the plugins will be removed?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 30, 2020, 4:21am UTC](https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463/7 "2020-11-30T04:21:32Z")

</div>

Did you fix the auth issue?

What are the errors you are seeing?

---

<div class="post-metadata">

**Author:** ![skyluke.1987](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Post date:** [November 30, 2020, 9:13am UTC](https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463/8 "2020-11-30T09:13:54Z")

</div>

Can you assist and guide me to do the ES upgrade?

I just tried to upgrade, but using Sudo, it causing the directory to have 2 different users (Root & Elasticsearch) how can I correct this? Installing ES shouldn't I use the root account?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 30, 2020, 7:23pm UTC](https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463/9 "2020-11-30T19:23:45Z")

</div>

It's going to be hard if you only ask questions and don't provide some clear indications of your issues unfortunately. You've gone from an auth error, to a missing plugin one, to an upgrade one, and it's not clear what you are doing or what your problems are.

---

<div class="post-metadata">

**Author:** ![skyluke.1987](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Post date:** [December 2, 2020, 3:25am UTC](https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463/10 "2020-12-02T03:25:43Z")

</div>

Hi Warkolm,

I have manage to upgrade the ES to 7.10 and its running now. Now I need to try to get data from heartbeat-elastic. Now I am checking why is it not receiving.

Currently my versions for the component are as below:

- Filebeat 7.7
- Heartbeat 7.1

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 2, 2020, 3:30am UTC](https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463/11 "2020-12-02T03:30:01Z")

</div>

What do your configs look like?  
What do the logs contain?

---

<div class="post-metadata">

**Author:** ![skyluke.1987](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Post date:** [December 2, 2020, 3:57am UTC](https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463/12 "2020-12-02T03:57:18Z")

</div>

Hi may I know filebeat needs the rights "root:filebeat" in order to work?

---

<div class="post-metadata">

**Author:** ![skyluke.1987](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Post date:** [December 2, 2020, 7:21am UTC](https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463/13 "2020-12-02T07:21:42Z")

</div>

![Screenshot 2020-12-02 at 3.21.19 PM](https://us1.discourse-cdn.com/elastic/original/3X/2/d/2d8cb954ad2826e4f30c318fb3e7b3f0fd677f7c.png)  
Its empty. cant get log. But there might be lot causes. How can i debug?

---

<div class="post-metadata">

**Author:** ![skyluke.1987](https://avatars.discourse-cdn.com/v4/letter/s/48db29/32.png) [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Post date:** [December 4, 2020, 2:22am UTC](https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463/14 "2020-12-04T02:22:23Z")

</div>

Hi all, now i am getting data, but the uptime does not show the detail table below. May I know how can I debug?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 1, 2021, 2:22am UTC](https://discuss.elastic.co/t/heartbeat-elastic-unable-to-get-data/256463/15 "2021-01-01T02:22:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
