Metricbeat 5.5 at Win Server 2008 fails to send data to elasticsearch 5.5

[jantoth]

Hello all,

my problem is rather straightforward:

I have spend more than one day investigating this issue. I have several linux servers
set up with an exact configuration and I set it up literally in few minutes however,
Metricbeat 5.5 at Win Server 2008 fails to send data to elasticsearch 5.5. (telnet works)

Elasticsearch http://ip.ip.ip.ip:9200 is reachable from the Win Server 2008 chrome browser with
no problems however, when I stat is as a service I am getting:

2017/07/13 06:50:51.089493 single.go:173: DBG messages dropped
2017/07/13 06:50:51.089493 output.go:109: DBG output worker: publish 3 events
2017/07/13 06:50:51.090493 client.go:637: DBG ES Ping(url=http://ip.ip.ip.ip:9200, timeout=1m30s)
2017/07/13 06:50:51.155499 client.go:642: DBG Ping request failed with: 403 Forbidden
2017/07/13 06:50:51.155499 single.go:140: ERR Connecting error publishing events (retrying): 403 Forbidden
2017/07/13 06:50:51.155499 single.go:156: DBG send fail

I also tried to install metricbeat 5.5 at my windows 7 laptop and it works with usual configuration like in seconds../.

[andrewkroh]

@jantoth

my problem is rather straightforward:

@jantoth

ERR Connecting error publishing events (retrying): 403 Forbidden

I agree, pretty straightforward. You are getting a 403 Forbidden response from the HTTP endpoint. Are you using xpack security? Did you forget a username and password?