MetricBeat Failing on ElasticSearch AWS Instance - Unauthorized - Authentication required

Hello everyone,

I'm having issues setting up MetricBeat on AWS ES Instance, I'm getting the following error :

ERROR instance/beat.go:971 Exiting: 1 error: error loading index pattern: returned 401 to import file: <nil>. Response: {"statusCode":401,"error":"Unauthorized","message":"Authentication required"}

Exiting: 1 error: error loading index pattern: returned 401 to import file: <nil>. Response: {"statusCode":401,"error":"Unauthorized","message":"Authentication required"}

These are my metricbeat.yml settings

output.elasticsearch:
  hosts: ["https://search-xxxxxx.us-east-1.es.amazonaws.com:443"]
  username: "user"
  password: "password"

setup.ilm.enabled: false

setup.kibana:
  host: "https://search-xxxxxx.us-east-1.es.amazonaws.com:443/_plugin/kibana/"

Everything works fine when I set this up on the cloud instance using the cloud id and cloud auth. It also works fine using the logstash settings from the AWS documentation, I can properly PUT data via CURL but not with metricbeat / Filebeat.

Any help will be really appreciated.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.