Winlogbeat error when enabling Xpack

Elastic Stack Beats
,
1

I get the following error when I uncommitted the Xpack monitoring reporter. I have also, uncommitted and entered the Elasticsearch host, but nothing seems to work. I also use Logstash as my output source. What am I missing?

2019-06-25T08:53:56.094-0400 ERROR instance/beat.go:802 Exiting: No monitoring reporter configured

#============================== Xpack Monitoring ===============================
# winlogbeat can export internal metrics to a central Elasticsearch monitoring
# cluster.  This requires xpack monitoring to be enabled in Elasticsearch.  The
# reporting is disabled by default.

# Set to true to enable the monitoring reporter.
xpack.monitoring.enabled: true

# Uncomment to send the metrics to Elasticsearch. Most settings from the
# Elasticsearch output are accepted here as well. Any setting that is not set is
# automatically inherited from the Elasticsearch output configuration, so if you
# have the Elasticsearch output configured, you can simply uncomment the
# following line.
#xpack.monitoring.elasticsearch:
2

Is there something I'm missing trying to set this up?

3

Hi @Marcell0e

As mentioned in the configuration file, you have to also configure the Elasticsearch output. Look for an additional block in the configuration file similar to the following and uncomment it:

#================================ Outputs =====================================

# Configure what output to use when sending the data collected by the beat.

#-------------------------- Elasticsearch output ------------------------------
output.elasticsearch:
  # Array of hosts to connect to.
  hosts: ["localhost:9200"]

  # Optional protocol and basic auth credentials.
  #protocol: "https"
  #username: "elastic"
  #password: "changeme"
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.