# Input http\_endpoint is not accepted by 7.9.0 or master

**URL:** <https://discuss.elastic.co/t/input-http-endpoint-is-not-accepted-by-7-9-0-or-master/245557>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [August 19, 2020, 9:00am UTC](https://discuss.elastic.co/t/input-http-endpoint-is-not-accepted-by-7-9-0-or-master/245557 "2020-08-19T09:00:01Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![KlavsKlavsen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/klavsklavsen/32/74145_2.png) [@KlavsKlavsen](https://discuss.elastic.co/u/KlavsKlavsen)\
**Post date:** [August 19, 2020, 9:00am UTC](https://discuss.elastic.co/t/input-http-endpoint-is-not-accepted-by-7-9-0-or-master/245557/1 "2020-08-19T09:00:02Z")

</div>

I just tried building docker images (make release) from github on both master and the new 7.9.0 tag.  
When I then run filebeat with this config:

```auto
    filebeat.inputs:
    - type: http_endpoint
      enabled: true
      listen_address: 127.0.0.1
      listen_port: 8080
    #
    #======================= Logging from filebeat itself=========================
    logging:
      to_files: true
      json: false
      level: info
      files:
        path: /usr/share/filebeat/logs/
        name: filebeat.log
        keepfiles: 7
        permissions: 0644
    #================================ Outputs ======================================
    output.kafka:
    # initial brokers for reading cluster metadata
      hosts: ${ENVIRONMENT_FILEBEAT_HOSTS}
      ssl:
        enabled: true
        certificate_authorities:
          - "/etc/pki/filebeat/elk-kafka-ca.cer"
        verification_mode: full
        supported_protocols: [TLSv1.2]
      #Certificate for SSL client authentication
        certificate: "/etc/pki/filebeat/elk-kafka-private.cer"
      # Client Certificate Key - private key
        key: "/etc/pki/filebeat/elk-kafka-private.key"
        key_passphrase: ${ENVIRONMENT_FILEBEAT_PWD}
      # renegotiation: never
      topic: ${ENVIRONMENT_FILEBEAT_TOPIC}

```

filebeat fails with:

```auto
2020-08-19T08:49:46.642Z INFO instance/beat.go:299 Setup Beat: filebeat; Version: 7.9.0
2020-08-19T08:49:46.646Z INFO [publisher] pipeline/module.go:113 Beat name: r9432a5f928-apim-v2-7c48dcf9d-trqjp
2020-08-19T08:49:46.647Z WARN beater/filebeat.go:178 Filebeat is unable to load the Ingest Node pipelines for the configured modules because the Elasticsearch output is not configured/enabled. If you have already loaded the Ingest Node pipelines or are using Logstash pipelines, you can ignore this warning.
2020-08-19T08:49:46.647Z INFO instance/beat.go:450 filebeat start running.
2020-08-19T08:49:46.648Z INFO [monitoring] log/log.go:118 Starting metrics logging every 30s
2020-08-19T08:49:46.650Z INFO memlog/store.go:119 Loading data file of '/usr/share/filebeat/data/registry/filebeat' succeeded. Active transaction id=0
2020-08-19T08:49:46.650Z INFO memlog/store.go:124 Finished loading transaction log file for '/usr/share/filebeat/data/registry/filebeat'. Active transaction id=0
2020-08-19T08:49:46.650Z WARN beater/filebeat.go:381 Filebeat is unable to load the Ingest Node pipelines for the configured modules because the Elasticsearch output is not configured/enabled. If you have already loaded the Ingest Node pipelines or are using Logstash pipelines, you can ignore this warning.
2020-08-19T08:49:46.650Z INFO [registrar] registrar/registrar.go:108 States Loaded from registrar: 0
2020-08-19T08:49:46.650Z INFO [crawler] beater/crawler.go:71 Loading Inputs: 1
2020-08-19T08:49:46.650Z INFO beater/crawler.go:148 Stopping Crawler
2020-08-19T08:49:46.650Z INFO beater/crawler.go:158 Stopping 0 inputs
2020-08-19T08:49:46.650Z INFO beater/crawler.go:178 Crawler stopped
2020-08-19T08:49:46.650Z INFO [registrar] registrar/registrar.go:131 Stopping Registrar
2020-08-19T08:49:46.650Z INFO [registrar] registrar/registrar.go:165 Ending Registrar
2020-08-19T08:49:46.738Z INFO [registrar] registrar/registrar.go:136 Registrar stopped
2020-08-19T08:49:46.740Z INFO [monitoring] log/log.go:153 Total non-zero metrics {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":10,"time":{"ms":16}},"total":{"ticks":40,"time":{"ms":50},"value":40},"user":{"ticks":30,"time":{"ms":34}}},"handles":{"limit":{"hard":1048576,"soft":1048576},"open":8},"info":{"ephemeral_id":"6519a089-e4ce-4a97-a6be-0f8ec70cc23e","uptime":{"ms":395}},"memstats":{"gc_next":7539280,"memory_alloc":4650336,"memory_total":11295032,"rss":31948800},"runtime":{"goroutines":10}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"type":"kafka"},"pipeline":{"clients":0,"events":{"active":0}}},"registrar":{"states":{"current":0}},"system":{"cpu":{"cores":4},"load":{"1":3.09,"15":2.56,"5":2.69,"norm":{"1":0.7725,"15":0.64,"5":0.6725}}}}}}
2020-08-19T08:49:46.740Z INFO [monitoring] log/log.go:154 Uptime: 397.102732ms
2020-08-19T08:49:46.740Z INFO [monitoring] log/log.go:131 Stopping metrics logging.
2020-08-19T08:49:46.740Z INFO instance/beat.go:456 filebeat stopped.
2020-08-19T08:49:46.740Z ERROR instance/beat.go:951 Exiting: Failed to start crawler: starting input failed: Error while initializing input: Error creating input. No such input type exist: 'http_endpoint'
Exiting: Failed to start crawler: starting input failed: Error while initializing input: Error creating input. No such input type exist: 'http_endpoint'

```

According to docs here [https://www.elastic.co/guide/en/beats/filebeat/7.9/filebeat-input-http\_endpoint.html](https://www.elastic.co/guide/en/beats/filebeat/7.9/filebeat-input-http_endpoint.html) - this config should be absolutely correct.  
The config works if we remove the http\_endpoint input section - and make filebeat read from a file instead.

---

<div class="post-metadata">

**Author:** ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)\
**Post date:** [August 24, 2020, 4:46pm UTC](https://discuss.elastic.co/t/input-http-endpoint-is-not-accepted-by-7-9-0-or-master/245557/3 "2020-08-24T16:46:22Z")

</div>

Which Filebeat did you build one under `filebeat` or `x-pack/filebeat`? This input is part of x-pack, so you have to build the Beat under `x-pack/filebeat`.

---

<div class="post-metadata">

**Author:** ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)\
**Post date:** [August 24, 2020, 4:47pm UTC](https://discuss.elastic.co/t/input-http-endpoint-is-not-accepted-by-7-9-0-or-master/245557/4 "2020-08-24T16:47:42Z")

</div>

I have tried to reproduce the problem, but only got this error when I tried to use the OSS version of Filebeat. So everything works as expected.

---

<div class="post-metadata">

**Author:** ![KlavsKlavsen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/klavsklavsen/32/74145_2.png) [@KlavsKlavsen](https://discuss.elastic.co/u/KlavsKlavsen)\
**Post date:** [August 25, 2020, 8:49am UTC](https://discuss.elastic.co/t/input-http-endpoint-is-not-accepted-by-7-9-0-or-master/245557/5 "2020-08-25T08:49:20Z")

</div>

How do I build the x-pack edition?  
will: make release - build x-pack edition also, or ?

---

<div class="post-metadata">

**Author:** ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)\
**Post date:** [August 25, 2020, 1:23pm UTC](https://discuss.elastic.co/t/input-http-endpoint-is-not-accepted-by-7-9-0-or-master/245557/6 "2020-08-25T13:23:40Z")

</div>

`make release` builds all Beats, both the OSS and X-Pack distributions. The OSS packages are under the folder `filebeat/build/distributions`, the X-Pack versions are under `x-pack/filebeat/build/distributions`.

Is there any reason why you are not using the official packages? You can find the latest info about installing Filebeat here: [https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-installation-configuration.html#installation](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-installation-configuration.html#installation)

---

<div class="post-metadata">

**Author:** ![KlavsKlavsen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/klavsklavsen/32/74145_2.png) [@KlavsKlavsen](https://discuss.elastic.co/u/KlavsKlavsen)\
**Post date:** [August 26, 2020, 10:04am UTC](https://discuss.elastic.co/t/input-http-endpoint-is-not-accepted-by-7-9-0-or-master/245557/7 "2020-08-26T10:04:10Z")

</div>

Well - when we started this - no one had yet build a 7.9.0 docker image 🙂  
I assume [https://hub.docker.com/r/elastic/filebeat/tags](https://hub.docker.com/r/elastic/filebeat/tags) is the x-pack edition (so it includes the http\_endpoint input ) ?

---

<div class="post-metadata">

**Author:** ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)\
**Post date:** [August 26, 2020, 3:58pm UTC](https://discuss.elastic.co/t/input-http-endpoint-is-not-accepted-by-7-9-0-or-master/245557/8 "2020-08-26T15:58:22Z")

</div>

I am not sure about Docker Hub. But the images published by Elastic come with http\_endpoint: [https://www.docker.elastic.co/r/beats/filebeat](https://www.docker.elastic.co/r/beats/filebeat)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 23, 2020, 5:58pm UTC](https://discuss.elastic.co/t/input-http-endpoint-is-not-accepted-by-7-9-0-or-master/245557/9 "2020-09-23T17:58:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.