# Ingesting files from host with filebeat **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [November 5, 2020, 6:52pm UTC](https://discuss.elastic.co/t/ingesting-files-from-host-with-filebeat/254448 "2020-11-05T18:52:55Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![droidus](https://avatars.discourse-cdn.com/v4/letter/d/13edae/32.png) [@droidus](https://discuss.elastic.co/u/droidus)\ **Post date:** [November 5, 2020, 6:52pm UTC](https://discuss.elastic.co/t/ingesting-files-from-host-with-filebeat/254448/1 "2020-11-05T18:52:56Z")
I am following this tutorial here: [https://kifarunix.com/install-and-configure-elastic-auditbeat-on-ubuntu-18-04/](https://kifarunix.com/install-and-configure-elastic-auditbeat-on-ubuntu-18-04/). Upon running this command: `curl -XGET 192.168.0.106:9200/_cat/indices?v` I do not see auditbeat listed. It does return indexes, but just not that one. ---
**Author:** ![aaron-nimocks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aaron-nimocks/32/73965_2.png) [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\ **Post date:** [November 5, 2020, 8:35pm UTC](https://discuss.elastic.co/t/ingesting-files-from-host-with-filebeat/254448/2 "2020-11-05T20:35:21Z")
Greeting @droidus What do you get when you run the below commands? Also I would follow [our installation steps](https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-installation-configuration.html). The ones you linked to could be correct but I didn't verify. `service auditbeat status` `auditbeat test config` `auditbeat test output` ---
**Author:** ![droidus](https://avatars.discourse-cdn.com/v4/letter/d/13edae/32.png) [@droidus](https://discuss.elastic.co/u/droidus)\ **Post date:** [November 6, 2020, 9:58pm UTC](https://discuss.elastic.co/t/ingesting-files-from-host-with-filebeat/254448/3 "2020-11-06T21:58:39Z")
` auditbeat.service - Audit the activities of users and processes on your system. Loaded: loaded (/lib/systemd/system/auditbeat.service; enabled; vendor preset: enabled) Active: active (running) since Fri 2020-11-06 16:25:01 EST; 27min ago Docs: [https://www.elastic.co/products/beats/auditbeat](https://www.elastic.co/products/beats/auditbeat) Main PID: 3726 (auditbeat) Tasks: 19 (limit: 4915) Memory: 198.7M CGroup: /system.slice/auditbeat.service └─3726 /usr/share/auditbeat/bin/auditbeat --environment systemd -c /etc/auditbeat/auditbeat.yml --path.home /usr/share/audit Nov 06 16:50:08 my-device auditbeat[3726]: 2020-11-06T16:50:08.194-0500 WARN [process] process/process.go:289 Nov 06 16:50:08 my-device auditbeat[3726]: 2020-11-06T16:50:08.195-0500 WARN [process] process/process.go:289 Nov 06 16:50:28 my-device auditbeat[3726]: 2020-11-06T16:50:28.188-0500 WARN [process] process/process.go:289 Nov 06 16:50:28 my-device auditbeat[3726]: 2020-11-06T16:50:28.188-0500 WARN [process] process/process.go:289 Nov 06 16:50:38 my-device auditbeat[3726]: 2020-11-06T16:50:38.171-0500 INFO [monitoring] log/log.go:145 Non- Nov 06 16:50:48 my-device auditbeat[3726]: 2020-11-06T16:50:48.238-0500 WARN [process] process/process.go:289 Nov 06 16:51:08 my-device auditbeat[3726]: 2020-11-06T16:51:08.172-0500 INFO [monitoring] log/log.go:145 Non- Nov 06 16:51:38 my-device auditbeat[3726]: 2020-11-06T16:51:38.170-0500 INFO [monitoring] log/log.go:145 Non- Nov 06 16:51:48 my-device auditbeat[3726]: 2020-11-06T16:51:48.190-0500 WARN [process] process/process.go:289 Nov 06 16:52:08 my-device auditbeat[3726]: 2020-11-06T16:52:08.176-0500 INFO [monitoring] log/log.go:145 Non-` For the test config, it just hangs. `logstash: 192.168.0.106:5044... connection... parse host... OK dns lookup... OK addresses: 192.168.0.106 dial up... OK TLS... WARN secure connection disabled talk to server... OK` ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 4, 2020, 11:58pm UTC](https://discuss.elastic.co/t/ingesting-files-from-host-with-filebeat/254448/4 "2020-12-04T23:58:41Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.