# Not getting indices log data from Elasticsearch/Filebeat in Kibana

**URL:** https://discuss.elastic.co/t/not-getting-indices-log-data-from-elasticsearch-filebeat-in-kibana/258057
**Category:** Beats
**Tags:** filebeat
**Created:** [December 8, 2020, 10:19pm UTC](https://discuss.elastic.co/t/not-getting-indices-log-data-from-elasticsearch-filebeat-in-kibana/258057 "2020-12-08T22:19:29Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![FREDDIE2020](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/freddie2020/32/66882_2.png) [@FREDDIE2020](https://discuss.elastic.co/u/FREDDIE2020)
#### Post date: [December 8, 2020, 10:19pm UTC](https://discuss.elastic.co/t/not-getting-indices-log-data-from-elasticsearch-filebeat-in-kibana/258057/1 "2020-12-08T22:19:29Z")

</div>

Hello,

I am Not getting indices log data from Elasticsearch/Filebeat in Kibana to create my indexes any longer.

How can I rectify this issue or what do I need to look at to try and find out the issues?

Filebeat is deployed to all my EKS Clusters and EC2 instances.

Any help appreciated.

Thanks, FREDDIE2020

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [December 8, 2020, 10:22pm UTC](https://discuss.elastic.co/t/not-getting-indices-log-data-from-elasticsearch-filebeat-in-kibana/258057/2 "2020-12-08T22:22:11Z")

</div>

What do your Filebeat logs show?

---

<div class="post-metadata">

### Author: ![FREDDIE2020](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/freddie2020/32/66882_2.png) [@FREDDIE2020](https://discuss.elastic.co/u/FREDDIE2020)
#### Post date: [December 9, 2020, 9:00pm UTC](https://discuss.elastic.co/t/not-getting-indices-log-data-from-elasticsearch-filebeat-in-kibana/258057/3 "2020-12-09T21:00:36Z")

</div>

@warkolm  
Here is error I see in my filebeat logs:  
2020-12-09T19:51:15.481Z ERROR pipeline/output.go:100 Failed to connect to backoff(elasticsearch([https://logview-prd.tfs.toyota.com:443](https://logview-prd.tfs.toyota.com:443))): 401 Unauthorized: Unauthorized  
2020-12-09T19:51:15.481Z INFO pipeline/output.go:93 Attempting to reconnect to backoff(elasticsearch([https://logview-prd.tfs.toyota.com:443](https://logview-prd.tfs.toyota.com:443))) with 4002 reconnect attempt(s)  
2020-12-09T19:51:15.482Z INFO [publisher] pipeline/retry.go:196 retryer: send unwait-signal to consumer  
2020-12-09T19:51:15.482Z INFO [publisher] pipeline/retry.go:198 done  
2020-12-09T19:51:15.482Z INFO [publisher] pipeline/retry.go:173 retryer: send wait signal to consumer  
2020-12-09T19:51:15.482Z INFO [publisher] pipeline/retry.go:175 done  
2020-12-09T19:51:22.880Z INFO [monitoring] log/log.go:145 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":5030},"total":{"ticks":141880,"time":{"ms":57},"value":141880},"user":{"ticks":136850,"time":{"ms":57}}},"handles":{"limit":{"hard":1048576,"soft":1048576},"open":40},"info":{"ephemeral\_id":"f9fe3b7c-2dc1-4c6e-9f30-3e04d75d00ac","uptime":{"ms":180900031}},"memstats":{"gc\_next":53721280,"memory\_alloc":26907200,"memory\_total":2452047344},"runtime":{"goroutines":204}},"filebeat":{"harvester":{"files":{"00c91a59-eee0-4a91-92b2-c7f85a319c4c":{"size":1287},"373f83c3-b956-4945-bbd5-ad2d947985ed":{"size":1288},"5e99b1c3-83be-435e-8b91-241ca0c470cf":{"size":122},"8e662437-7b88-495f-9e30-0997416b9ab5":{"size":923},"e7a1cb80-e824-4988-b866-82e88434e246":{"size":374}},"open\_files":30,"running":54}},"libbeat":{"config":{"module":{"running":0}},"output":{"read":{"bytes":194},"write":{"bytes":212}},"pipeline":{"clients":1,"events":{"active":4117,"retry":50}}},"registrar":{"states":{"current":8}},"system":{"load":{"1":0.07,"15":0.32,"5":0.25,"norm":{"1":0.0175,"15":0.08,"5":0.0625}}}}}}

Any help appreciated.

Thanks,

FREDDIE2020

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [December 9, 2020, 9:17pm UTC](https://discuss.elastic.co/t/not-getting-indices-log-data-from-elasticsearch-filebeat-in-kibana/258057/4 "2020-12-09T21:17:32Z")

</div>

> [@FREDDIE2020](#):
>
> 401 Unauthorized: Unauthorized

You might want to check your auth details then?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 6, 2021, 11:17pm UTC](https://discuss.elastic.co/t/not-getting-indices-log-data-from-elasticsearch-filebeat-in-kibana/258057/5 "2021-01-06T23:17:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
