# Logstash Failed to create monitoring event

**URL:** https://discuss.elastic.co/t/logstash-failed-to-create-monitoring-event/74191
**Category:** Logstash
**Created:** [February 7, 2017, 9:25am UTC](https://discuss.elastic.co/t/logstash-failed-to-create-monitoring-event/74191 "2017-02-07T09:25:53Z")
**Posts on this page:** 1
**Showing post:** 6

<div class="post-metadata">

### Author: ![masik](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/masik/32/16415_2.png) [@masik](https://discuss.elastic.co/u/masik)
#### Post date: [March 16, 2017, 1:12pm UTC](https://discuss.elastic.co/t/logstash-failed-to-create-monitoring-event/74191/6 "2017-03-16T13:12:15Z")

</div>

Need to change user to elastic and passwd changeme in output to elasticsearch  
he need all grant access to create indexes

and add to elastic search

action.auto\_create\_index: .security,.monitoring\*,.watches,.triggered\_watches,.watcher-history\*

or you can add

xpack.security.enabled: false  
to disable auth in elasticsearch

---

_[View the full topic](https://discuss.elastic.co/t/logstash-failed-to-create-monitoring-event/74191)._