Packetbeat installation fails on Windows

Elastic Stack Beats
1

I am trying to install Packetbeat on a Windows server, but I am getting the following error:

Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to http://localhost:5601/api/status fails: fail to execute the HTTP GET request: Get http://localhost:5601/api/status: dial tcp 127.0.0.1:5601: connectex: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.. Response: .

My configuration (packetbeat.yml) file has this information:

DASHBOARD
setup.dashboards.enabled: true

KIBANA
setup.kibana: ["172.21.69.92:5601"]
host: ["172.21.69.92:5601"]

ELASTICSEARCH
output.elasticsearch:
hosts: ["172.21.69.92:9200"]

My elasticsearch and Kibana are on the same host.

From the machine where I want to install packetbeat I can get to the host where Elasticsearch and Kibana are installed. I can ping and telnet.

Kibana and Elasticsearch version: 7.3.0
Packetbeat version: 7.3.1

4

Hi @thebeaoliveira,

Packetbeat is still trying to connect to 127.0.0.1:5601, so it seems that it is not using the settings in the configuration file.

Looking at the file you pasted, it seems incorrectly formatted, could you paste the exact configuration you are using as preformatted text? (using the </> button in the toolbar)

5

Hi @jsoriano, it is like this

#============================== Kibana =====================================

# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API.
# This requires a Kibana endpoint configuration.
# setup.kibana: ["172.21.69.92:5601"]

# Kibana Host
# Scheme and port can be left out and will be set to the default (http and 5601)
# In case you specify and additional path, the scheme is required: http://localhost:5601/path
# IPv6 addresses should always be defined as: https://[2001:db8::1]:5601
host: ["172.21.69.92:5601"]

#-------------------------- Elasticsearch output ------------------------------
output.elasticsearch:
# Array of hosts to connect to.
hosts: ["172.21.69.92:9200"]
7

I think that some indentation is missing there, the configuration should be like this (removing comments for clarity):

setup.kibana:
    host: ["172.21.69.92:5601"]

output.elasticsearch:
    hosts: ["172.21.69.92:9200"]
1 Like
8

That was it!

Thanks for the help! :slight_smile:

1 Like
9

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.