# System\_api\_version \[7\] is not supported by system\_id beats

**URL:** https://discuss.elastic.co/t/system-api-version-7-is-not-supported-by-system-id-beats/182406
**Category:** Beats
**Tags:** elastic-stack-monitoring, filebeat
**Created:** [May 23, 2019, 10:47am UTC](https://discuss.elastic.co/t/system-api-version-7-is-not-supported-by-system-id-beats/182406 "2019-05-23T10:47:36Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![Urs\_Bronk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/urs_bronk/32/44318_2.png) [@Urs\_Bronk](https://discuss.elastic.co/u/Urs_Bronk)
#### Post date: [May 23, 2019, 10:47am UTC](https://discuss.elastic.co/t/system-api-version-7-is-not-supported-by-system-id-beats/182406/1 "2019-05-23T10:47:37Z")

</div>

Hi,

I'm trying to monitor my filebeats on Kibana through elasticsearch.

I get the following error:  
system\_api\_version [7] is not supported by system\_id

ERROR pipeline/output.go:121 Failed to publish events: 400 Bad Request: {"error":{"root\_cause":[{"type":"illegal\_argument\_exception","reason":"system\_api\_version [7] is not supported by system\_id [beats]"}],"type":"illegal\_argument\_exception","reason":"system\_api\_version [7] is not supported by system\_id [beats]"},"status":400}

My filebeat.yml

```
#=========================== Filebeat inputs =============================

filebeat.inputs:

- type: log

  enabled: true
  paths:
- /var/log/pmta/*.csv

  harvester_limit: 20
  scan_frequency: 15s
  ignore_older: 120h
  close_inactive: 5m

#================================ General =====================================

name: everly.mta8.filebeat2
registry_path: /var/lib/filebeat/registry

#================================ Outputs =====================================

#----------------------------- Logstash output --------------------------------
output.logstash:
  hosts: ["remote.everly.com:5044"]
  worker: 16
  bulk_max_size: 4096
  compression_level: 3

  ssl.certificate_authorities: ["/etc/pki/tls/certs/logstash-forwarder-remote.everly.com.crt"]

#================================ Logging =====================================

logging.level: info
logging.to_files: true
logging.files:
  path: /var/log/filebeat
  name: filebeat.log
  keepfiles: 3
  rotateeverybytes: 26214400

#============================== Xpack Monitoring ===============================
xpack.monitoring.enabled: true
xpack.monitoring.elasticsearch:
 hosts: ["http://remote.everly.com:9200"]

```

What can possible be the problem?

---

<div class="post-metadata">

### Author: ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)
#### Post date: [May 23, 2019, 12:11pm UTC](https://discuss.elastic.co/t/system-api-version-7-is-not-supported-by-system-id-beats/182406/2 "2019-05-23T12:11:25Z")

</div>

Hi, two quick questions:

1. What version of Filebeat are you running?

2. What version of Elasticsearch is running at [http://remote.everly.com:9200](http://remote.everly.com:9200)?

Thanks,

Shaunak

---

<div class="post-metadata">

### Author: ![Urs\_Bronk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/urs_bronk/32/44318_2.png) [@Urs\_Bronk](https://discuss.elastic.co/u/Urs_Bronk)
#### Post date: [May 23, 2019, 12:47pm UTC](https://discuss.elastic.co/t/system-api-version-7-is-not-supported-by-system-id-beats/182406/3 "2019-05-23T12:47:52Z")

</div>

Filebeat 7.0  
Elastic 7.0  
Logshash 7.0

---

<div class="post-metadata">

### Author: ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)
#### Post date: [May 23, 2019, 1:12pm UTC](https://discuss.elastic.co/t/system-api-version-7-is-not-supported-by-system-id-beats/182406/4 "2019-05-23T13:12:14Z")

</div>

Hmmm, I just spun up the same versions locally and I'm not able to reproduce this issue. Could you post the output of `curl http://remote.everly.com:9200` please?

---

<div class="post-metadata">

### Author: ![Urs\_Bronk](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/urs_bronk/32/44318_2.png) [@Urs\_Bronk](https://discuss.elastic.co/u/Urs_Bronk)
#### Post date: [May 23, 2019, 1:47pm UTC](https://discuss.elastic.co/t/system-api-version-7-is-not-supported-by-system-id-beats/182406/5 "2019-05-23T13:47:18Z")

</div>

{  
"name" : "m1",  
"cluster\_name" : "everlytic-cluster-e6",  
"cluster\_uuid" : "hFw2-Sh3Q-OfWA75iCpVUw",  
"version" : {  
"number" : "6.7.1",  
"build\_flavor" : "default",  
"build\_type" : "rpm",  
"build\_hash" : "2f32220",  
"build\_date" : "2019-04-02T15:59:27.961366Z",  
"build\_snapshot" : false,  
"lucene\_version" : "7.7.0",  
"minimum\_wire\_compatibility\_version" : "5.6.0",  
"minimum\_index\_compatibility\_version" : "5.0.0"  
},  
"tagline" : "You Know, for Search"  
}

Apologies I see I have 6.7 installed and not 7.0

---

<div class="post-metadata">

### Author: ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)
#### Post date: [May 23, 2019, 2:03pm UTC](https://discuss.elastic.co/t/system-api-version-7-is-not-supported-by-system-id-beats/182406/6 "2019-05-23T14:03:27Z")

</div>

No worries, glad it wasn't something more serious!

Cheers,

Shaunak

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 20, 2019, 2:12pm UTC](https://discuss.elastic.co/t/system-api-version-7-is-not-supported-by-system-id-beats/182406/7 "2019-06-20T14:12:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
