I am using elk stack repo locally and using filebeat, i have configured filebeat but still saying "hosting provider type not detected"

here is my configuration

  output.elasticsearch:
  # Array of hosts to connect to.
  hosts: ["localhost:9200", "localhost:5601"]

  # Protocol - either `http` (default) or `https`.
  #protocol: "https"

  # Authentication credentials - either API key or username/password.
  #api_key: "id:api_key"
  username: "elastic"
  password: "changeme"

Welcome to our community! :smiley:
Please format your code/logs/config using the </> button, or markdown style back ticks. It helps to make things easy to read which helps us help you.

It'd also be helpful if you could show us the full error you are receiving here.

Remove the Kibana endpoint above That should only be the elasticsearch endpoint

hosts: ["localhost:9200"]

Please format your code in the future it's easy.. and helps

1 Like

Thanks, Stephen Brown for the reply but the issue didn't get resolved I am assuming that's the reason why filebeat is not shipping logs to the elasticsearch.

Hi Mark! Thanks for the reply, Let me just brief you on what I am trying.
I have done the setup for elk stack locally and I am using filebeat to ship the logs to Elasticsearch, but for some reason, I am not able to push logs to the Elasticsearch and I am getting this error when I start filebeat

{
  "log.level": "info",
  "@timestamp": "2022-06-27T17:41:26.369+0530",
  "log.logger": "add_cloud_metadata",
  "log.origin": {
    "file.name": "add_cloud_metadata/add_cloud_metadata.go",
    "file.line": 101
  },
  "message": "add_cloud_metadata: hosting provider type not detected.",
  "service.name": "filebeat",
  "ecs.version": "1.6.0"
}

What modules do you have enabled?

Hey Mark! it's working now :partying_face: I made a mistake in filebeat config file.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.