# Load the templates manually - is the output correct?

**URL:** https://discuss.elastic.co/t/load-the-templates-manually-is-the-output-correct/121520
**Category:** Beats
**Tags:** filebeat
**Created:** [February 26, 2018, 3:44pm UTC](https://discuss.elastic.co/t/load-the-templates-manually-is-the-output-correct/121520 "2018-02-26T15:44:03Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![przemolb](https://avatars.discourse-cdn.com/v4/letter/p/a9adbd/32.png) [@przemolb](https://discuss.elastic.co/u/przemolb)
#### Post date: [February 26, 2018, 3:44pm UTC](https://discuss.elastic.co/t/load-the-templates-manually-is-the-output-correct/121520/1 "2018-02-26T15:44:03Z")

</div>

Hi all,  
since my filebeat doesn't have any access to Elasticsearch I have to follow this procedure [https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-template.html#load-template-manually](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-template.html#load-template-manually).

I have the following output:

```
curl -XPUT -H 'Content-Type: application/json' http://localhost:9200/_template/filebeat-6.2.1 -d@/tmp/filebeat.template.json -u admin
Enter host password for user 'admin':
curl: (52) Empty reply from server

```

Is it correct output ? And how do I verify this command did what it was supposed to do ?

---

<div class="post-metadata">

### Author: ![przemolb](https://avatars.discourse-cdn.com/v4/letter/p/a9adbd/32.png) [@przemolb](https://discuss.elastic.co/u/przemolb)
#### Post date: [February 26, 2018, 4:09pm UTC](https://discuss.elastic.co/t/load-the-templates-manually-is-the-output-correct/121520/2 "2018-02-26T16:09:38Z")

</div>

> [@przemolb](#):
>
> \_template/filebeat

I've just had a look at elasticsearch logs and it told me that

```
Someone (/127.0.0.1:35678) speaks http plaintext instead of ssl, will close the channel

```

so I realized I should have used `-k` and `https`. After that I got the answer `acknowledged: true`.

---

<div class="post-metadata">

### Author: ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)
#### Post date: [February 27, 2018, 3:54am UTC](https://discuss.elastic.co/t/load-the-templates-manually-is-the-output-correct/121520/3 "2018-02-27T03:54:22Z")

</div>

Glad you found the solution yourself and thanks for posting it.

---

<div class="post-metadata">

### Author: ![przemolb](https://avatars.discourse-cdn.com/v4/letter/p/a9adbd/32.png) [@przemolb](https://discuss.elastic.co/u/przemolb)
#### Post date: [February 27, 2018, 11:46am UTC](https://discuss.elastic.co/t/load-the-templates-manually-is-the-output-correct/121520/4 "2018-02-27T11:46:28Z")

</div>

But after I run it and then run from the Kibana console:

```
GET _cat/indices

```

I don't get any filebeat-\* indices.  
Why is that ?

---

<div class="post-metadata">

### Author: ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)
#### Post date: [March 2, 2018, 1:41am UTC](https://discuss.elastic.co/t/load-the-templates-manually-is-the-output-correct/121520/5 "2018-03-02T01:41:28Z")

</div>

Can you share your filebeat log file?

---

<div class="post-metadata">

### Author: ![przemolb](https://avatars.discourse-cdn.com/v4/letter/p/a9adbd/32.png) [@przemolb](https://discuss.elastic.co/u/przemolb)
#### Post date: [March 2, 2018, 9:17am UTC](https://discuss.elastic.co/t/load-the-templates-manually-is-the-output-correct/121520/6 "2018-03-02T09:17:11Z")

</div>

It's already working. I have removed SG and went for the simplest solution. Also forgot to load the default dashboard (?).

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 30, 2018, 9:17am UTC](https://discuss.elastic.co/t/load-the-templates-manually-is-the-output-correct/121520/7 "2018-03-30T09:17:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
