Winlogbeat Dashbord Setup Error

Elastic Stack Beats
1

I am trying to setup dashboards, below is the .yml file .

# ------------------------------ Logstash Output -------------------------------
output.logstash:
  # The Logstash hosts
  hosts: ["172.16.12.18:5044"]
  user: "logstash"
  password: "${LS_PWD}"
setup.kibana:
  host: ["172.16.12.11:5601"]
  user: "elastic"
  password: "${LS_PWD}"

When I run the command .\winlogbeat.exe setup --dashboards I get the following error, what am i doing wrong here?

PS C:\Program Files\Winlogbeat> .\winlogbeat.exe setup --dashboards
Loading dashboards (Kibana must be running and reachable)
Exiting: error connecting to Kibana: can not convert 'object' into 'string' accessing 'setup.kibana.host' (source:'winlogbeat.yml')
2

Hello @Ashwin_Patil1,

I am not expert in ELK, but I think you just need to not declare kibana host as an array
try to replace

setup.kibana:
  host: ["172.16.12.11:5601"]

by

setup.kibana:
  host: "172.16.12.11:5601"
3

Thank you @TheHunter1
I am getting the following error, am sure that the credentials are right. Would know anything about this?

PS C:\Program Files\Winlogbeat> .\winlogbeat.exe setup --dashboards
Loading dashboards (Kibana must be running and reachable)
Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to http://172.16.12.11:5601/api/status fails: <nil>. Response: {"statusCode":401,"error":"Unauthorized","message":"[security_exception]: unable to authenticate user [] for REST request [/_security/_authenticate]"}.
4

use your browser and go to http://172.16.12.11:5601/api/status .. what are you getting when you use the credentials ?

5

{"statusCode":401,"error":"Unauthorized","message":"Unauthorized"}

6

try to check again if you are using the correct password,

and check also when you access kibana if in the url, it add automatically some 3 degits at the end of the url, like http://172.16.12.11:5601/amd

7

This is what I am getting, @TheHunter1

image

8

can you just access you kibana, not /api/status, and show me the url ?

9

Yes, I can access kibana @TheHunter1

10

This maybe can help you: Unable to load Kibana Dashboards via MetricBeat - #6 by Mario_Castro

11

Can you try without the user and password ? My beats yml looks like this and works fine.

setup.dashboards.enabled: true

setup.kibana:
  host: "x.x.x.x:5601"
  protocol: "https"
  ssl.verification_mode: "none"

output.elasticsearch:
  hosts: ["x.x.x.x:9200"]
  protocol: "https"
  ssl.verification_mode: "none"
  username: "elast"
  password: "REDACTED"

Something to note here though I use to setup my dashboards.

.\winlogbeat setup -e