# Hi i'm having trouble with this filebeat.yml configuration

**URL:** <https://discuss.elastic.co/t/hi-im-having-trouble-with-this-filebeat-yml-configuration/105325>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [October 26, 2017, 3:45am UTC](https://discuss.elastic.co/t/hi-im-having-trouble-with-this-filebeat-yml-configuration/105325 "2017-10-26T03:45:58Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shakirah](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shakirah/32/23417_2.png) [@Shakirah](https://discuss.elastic.co/u/Shakirah)\
**Post date:** [October 26, 2017, 3:45am UTC](https://discuss.elastic.co/t/hi-im-having-trouble-with-this-filebeat-yml-configuration/105325/1 "2017-10-26T03:45:58Z")

</div>

i'm having this kind of error and i don't have any other solutions anymore on how to fix this things up. Kindly please help me

Error Initialising publisher: beat.go:161: CRIT No outputs are defined. Please define one under the output section.  
beat.go:161: CRIT No outputs are defined. Please define one under the output section.

here is my filebeat.yml file

filebeat:  
prospectors: "-i"  
paths:  
- /var/log/\*.log  
- /var/log/secure  
- /var/log/messages  
document\_type: syslog

```
     paths:
     - /var/log/app/*.log
     document_type: app-access

```

### Elasticsearch as output

# elasticsearch:

```
# Array of hosts to connect to.
# Scheme and port can be left out and will be set to the default (http and 9200)
# In case you specify and additional path, the scheme is required: http://localhost:9200/path
# IPv6 addresses should always be defined as: https://[2001:db8::1]:9200
#hosts: ["192.168.0.30:9200"]

```

# tls configuration. By default is off.

```
#tls:
  # List of root certificates for HTTPS server verifications
  #certificate_authorities: ["/etc/pki/tls/certs/logstash-forwarder.crt"]

  # Certificate for TLS client authentication
  #certificate: "/etc/pki/client/cert.pem"

  # Client Certificate Key
  #certificate_key: "/etc/pki/client/cert.key"

```

### Logstash as output

logstash:

# The Logstash hosts

hosts: ["localhost:5044"]  
bulk\_max\_size: 1024

```
# Number of workers per Logstash host.
#worker: 1

# The maximum number of events to bulk into a single batch window. The
# default is 2048.
#bulk_max_size: 2048

# Set gzip compression level.

#compression_level: 3

# Optional load balance the events between the Logstash hosts

#loadbalance: true

# Optional index name. The default index name depends on the each beat.
# For Packetbeat, the default is set to packetbeat, for Topbeat
# top topbeat and for Filebeat to filebeat.

#index: filebeat

# Optional TLS. By default is off.
tls:
  # List of root certificates for HTTPS server verifications
  certificate_authorities: ["/etc/pki/tls/certs/logstash-forwarder.crt"]

  # Certificate for TLS client authentication
  #certificate: "/etc/pki/client/cert.pem"

  # Client Certificate Key
  #certificate_key: "/etc/pki/client/cert.key"

```

### File as output

file:  
# Path to the directory where to save the generated files. The option is mandatory.  
path: "/tmp/filebeat"

```
# Name of the generated files. The default is `filebeat` and it generates files: `filebeat`, `filebeat.1`, `filebeat.2`, etc.
#filename: filebeat

# Maximum size in kilobytes of each file. When this size is reached, the files are
# rotated. The default value is 10 MB.
#rotate_every_kb: 10000

# Maximum number of files under path. When this number of files is reached, the
# oldest file is deleted and the rest are shifted from last to first. The default
# is 7 files.
#number_of_files: 7

```

### Console output

# console:

```
# Pretty print json event
#pretty: false

```

Someone, please help me. Thank you very much ☹

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [October 26, 2017, 11:45am UTC](https://discuss.elastic.co/t/hi-im-having-trouble-with-this-filebeat-yml-configuration/105325/2 "2017-10-26T11:45:14Z")

</div>

please properly format you config using the `</>` button. Error message suggest you have no output enabled or indentation is off.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 27, 2017, 4:13am UTC](https://discuss.elastic.co/t/hi-im-having-trouble-with-this-filebeat-yml-configuration/105325/4 "2017-11-27T04:13:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.