# Problems getting started with Filebeat and Elasticsearch?

**URL:** <https://discuss.elastic.co/t/problems-getting-started-with-filebeat-and-elasticsearch/229974>\
**Category:** Elasticsearch\
**Created:** [April 27, 2020, 2:28pm UTC](https://discuss.elastic.co/t/problems-getting-started-with-filebeat-and-elasticsearch/229974 "2020-04-27T14:28:12Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![Forcep](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/forcep/32/67198_2.png) [@Forcep](https://discuss.elastic.co/u/Forcep)\
**Post date:** [April 28, 2020, 10:01am UTC](https://discuss.elastic.co/t/problems-getting-started-with-filebeat-and-elasticsearch/229974/3 "2020-04-28T10:01:14Z")

</div>

I restarted Elasticsearch and Kibana, then I re-installed filebeat :

Load template, had to remove the -e and the outputelastic to get the command running else it just complained about the format.

`filebeat.exe setup --index-management -E output.logstash.enabled=false -E 'output.elasticsearch.hosts=["localhost:9200"]'`

This command could not be run, Invoke-RestMethod is not known in PowerShell :

`Invoke-RestMethod -Method Delete "http://localhost:9200/filebeat-*"`

This command was successful :

`filebeat.exe setup --dashboards`

This command did not work :

`Start-Service filebeat`

So I started the filebeat service with TaskManager \> Services

No problem to browse Kibana(with login), the discovery grapth was shown. But when trying to click a couple of filebeat modules I got alot of errors, and when I went back to discovery it was stuck in loading loop, refresh did nothing.

I went back to the CMDs/PS and both Elasticsearch and Kibana was complaining about all shards failed again. Restarting Kibana did not help(could not connect all shared failed), Elasticsearch needs to be restarted again and maybe I need to setup the filebeat again.

Also, even if filebeat have been running as a service it does not seems like it is picking up my logfiles? Not sure where I can see what work the filebeat really do?

When trying to browse `_cat/node?v` I get :

`{"error":"Incorrect HTTP method for uri [/_cat/node?v] and method [GET], allowed: [POST]","status":405}`

The /localhost:9200/\_cat/indices?v gets this :

health status index uuid pri rep docs.count docs.deleted store.size pri.store.size  
green open .security-7 xssVpomvQYCjyJtzp6ILMQ 1 0  
green open .kibana\_task\_manager\_1 OBJL2YGpRSGu3V6JDQXD3g 1 0  
yellow open 5.12test\_ecacherowpatient iBIKh0NXSZO0KGIfVbueTQ 1 1 0 0 283b 283b  
green open .apm-agent-configuration 4ZptB0agRAq6Nv83UsZ1OA 1 0  
red open .kibana\_1 dEiI9h1SQauLEiKGFZB4Vg 1 0  
red open filebeat-7.5.1-2020.04.28-000001 \_tbLDOUqRuysMXuzI5zecA 1 1

Note : Im using a certificate but it is not fully valid so I hade to set allow all on some of these components.

Right now there is many lose parts that do not really work, hope we can solve it.

---

_[View the full topic](https://discuss.elastic.co/t/problems-getting-started-with-filebeat-and-elasticsearch/229974)._