Winlogbeat error on alias


I got an error on my client with Winlogbeat running below is the error log

2023-11-22T03:58:49.082+0800 ERROR [publisher_pipeline_output] pipeline/output.go:154 Failed to connect to backoff(elasticsearch( Connection marked as failed because the onConnect callback failed: resource 'winlogbeat-7.9.3' exists, but it is not an alias

Hoping for some answers as there are no logs going into kibana / elasticsearch


Did you do the the "setup" step from Winlogbeat quick start: installation and configuration | Winlogbeat Reference [8.11] | Elastic?

That should be what configures index lifecycle management (ILM) and creates the alias which points to the current write index.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.