# Winlogbeat Dashbord Setup Error

**URL:** <https://discuss.elastic.co/t/winlogbeat-dashbord-setup-error/279720>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [July 27, 2021, 11:37am UTC](https://discuss.elastic.co/t/winlogbeat-dashbord-setup-error/279720 "2021-07-27T11:37:15Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ashwin\_Patil1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashwin_patil1/32/90642_2.png) [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\
**Post date:** [July 27, 2021, 11:37am UTC](https://discuss.elastic.co/t/winlogbeat-dashbord-setup-error/279720/1 "2021-07-27T11:37:15Z")

</div>

I am trying to setup dashboards, below is the .yml file .

```auto
# ------------------------------ Logstash Output -------------------------------
output.logstash:
  # The Logstash hosts
  hosts: ["172.16.12.18:5044"]
  user: "logstash"
  password: "${LS_PWD}"
setup.kibana:
  host: ["172.16.12.11:5601"]
  user: "elastic"
  password: "${LS_PWD}"

```

When I run the command **.\winlogbeat.exe setup --dashboards** I get the following error, what am i doing wrong here?

```auto
PS C:\Program Files\Winlogbeat> .\winlogbeat.exe setup --dashboards
Loading dashboards (Kibana must be running and reachable)
Exiting: error connecting to Kibana: can not convert 'object' into 'string' accessing 'setup.kibana.host' (source:'winlogbeat.yml')

```

---

<div class="post-metadata">

**Author:** ![TheHunter1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thehunter1/32/80190_2.png) [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Post date:** [July 27, 2021, 12:08pm UTC](https://discuss.elastic.co/t/winlogbeat-dashbord-setup-error/279720/2 "2021-07-27T12:08:00Z")

</div>

Hello @Ashwin_Patil1,

I am not expert in ELK, but I think you just need to not declare kibana host as an array  
try to replace

```auto
setup.kibana:
  host: ["172.16.12.11:5601"]

```

by

```auto
setup.kibana:
  host: "172.16.12.11:5601"

```

---

<div class="post-metadata">

**Author:** ![Ashwin\_Patil1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashwin_patil1/32/90642_2.png) [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\
**Post date:** [July 27, 2021, 1:25pm UTC](https://discuss.elastic.co/t/winlogbeat-dashbord-setup-error/279720/3 "2021-07-27T13:25:09Z")

</div>

Thank you @TheHunter1  
I am getting the following error, am sure that the credentials are right. Would know anything about this?

```auto
PS C:\Program Files\Winlogbeat> .\winlogbeat.exe setup --dashboards
Loading dashboards (Kibana must be running and reachable)
Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to http://172.16.12.11:5601/api/status fails: <nil>. Response: {"statusCode":401,"error":"Unauthorized","message":"[security_exception]: unable to authenticate user [] for REST request [/_security/_authenticate]"}.

```

---

<div class="post-metadata">

**Author:** ![TheHunter1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thehunter1/32/80190_2.png) [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Post date:** [July 27, 2021, 1:42pm UTC](https://discuss.elastic.co/t/winlogbeat-dashbord-setup-error/279720/4 "2021-07-27T13:42:46Z")

</div>

use your browser and go to `http://172.16.12.11:5601/api/status` .. what are you getting when you use the credentials ?

---

<div class="post-metadata">

**Author:** ![Ashwin\_Patil1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashwin_patil1/32/90642_2.png) [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\
**Post date:** [July 27, 2021, 2:01pm UTC](https://discuss.elastic.co/t/winlogbeat-dashbord-setup-error/279720/5 "2021-07-27T14:01:22Z")

</div>

{"statusCode":401,"error":"Unauthorized","message":"Unauthorized"}

---

<div class="post-metadata">

**Author:** ![TheHunter1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thehunter1/32/80190_2.png) [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Post date:** [July 27, 2021, 2:09pm UTC](https://discuss.elastic.co/t/winlogbeat-dashbord-setup-error/279720/6 "2021-07-27T14:09:59Z")

</div>

try to check again if you are using the correct password,

and check also when you access kibana if in the url, it add automatically some 3 degits at the end of the url, like `http://172.16.12.11:5601/amd`

---

<div class="post-metadata">

**Author:** ![Ashwin\_Patil1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashwin_patil1/32/90642_2.png) [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\
**Post date:** [July 27, 2021, 2:34pm UTC](https://discuss.elastic.co/t/winlogbeat-dashbord-setup-error/279720/7 "2021-07-27T14:34:46Z")

</div>

This is what I am getting, @TheHunter1

![image](https://us1.discourse-cdn.com/elastic/original/3X/2/1/211880ca1aff8343da68d275dc0547e0aa5a74e3.png)

---

<div class="post-metadata">

**Author:** ![TheHunter1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thehunter1/32/80190_2.png) [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Post date:** [July 27, 2021, 2:50pm UTC](https://discuss.elastic.co/t/winlogbeat-dashbord-setup-error/279720/8 "2021-07-27T14:50:00Z")

</div>

can you just access you kibana, not `/api/status`, and show me the url ?

---

<div class="post-metadata">

**Author:** ![Ashwin\_Patil1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashwin_patil1/32/90642_2.png) [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\
**Post date:** [July 27, 2021, 4:15pm UTC](https://discuss.elastic.co/t/winlogbeat-dashbord-setup-error/279720/9 "2021-07-27T16:15:05Z")

</div>

Yes, I can access kibana @TheHunter1

---

<div class="post-metadata">

**Author:** ![TheHunter1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thehunter1/32/80190_2.png) [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Post date:** [July 28, 2021, 7:04am UTC](https://discuss.elastic.co/t/winlogbeat-dashbord-setup-error/279720/10 "2021-07-28T07:04:53Z")

</div>

This maybe can help you: [Unable to load Kibana Dashboards via MetricBeat - #6 by Mario\_Castro](https://discuss.elastic.co/t/unable-to-load-kibana-dashboards-via-metricbeat/166712/6)

---

<div class="post-metadata">

**Author:** ![termcap](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/termcap/32/91415_2.png) [@termcap](https://discuss.elastic.co/u/termcap)\
**Post date:** [August 2, 2021, 3:43pm UTC](https://discuss.elastic.co/t/winlogbeat-dashbord-setup-error/279720/11 "2021-08-02T15:43:14Z")

</div>

Can you try without the user and password ? My beats yml looks like this and works fine.

```auto
setup.dashboards.enabled: true

setup.kibana:
  host: "x.x.x.x:5601"
  protocol: "https"
  ssl.verification_mode: "none"

output.elasticsearch:
  hosts: ["x.x.x.x:9200"]
  protocol: "https"
  ssl.verification_mode: "none"
  username: "elast"
  password: "REDACTED"

```

Something to note here though I use to setup my dashboards.

`.\winlogbeat setup -e`

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 30, 2021, 5:43pm UTC](https://discuss.elastic.co/t/winlogbeat-dashbord-setup-error/279720/12 "2021-08-30T17:43:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
