# Winlogbeat to Kibana api/failed

**URL:** <https://discuss.elastic.co/t/winlogbeat-to-kibana-api-failed/270530>\
**Category:** Kibana\
**Created:** [April 19, 2021, 4:46am UTC](https://discuss.elastic.co/t/winlogbeat-to-kibana-api-failed/270530 "2021-04-19T04:46:18Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Coeus.IT](https://avatars.discourse-cdn.com/v4/letter/c/d07c76/32.png) [@Coeus.IT](https://discuss.elastic.co/u/Coeus.IT)\
**Post date:** [April 19, 2021, 4:46am UTC](https://discuss.elastic.co/t/winlogbeat-to-kibana-api-failed/270530/1 "2021-04-19T04:46:18Z")

</div>

Hi,

I have setup a Ubuntu server for centralized logs.  
Installed:

1. Elasticsearch
2. Kibana
3. Logstash

Now, when I wants to run ".\winlogbeat.exe setup --dashboard" from Windows 10 machine, it shows  
"error connecting to kibana: fail to get the kibana version: HTTP GET request to HTTP://:5601/api/status fails: fail to execute the HTTP GET request: No connection could be made because the target machine actively refused it.. Response: ."

Please assist

---

<div class="post-metadata">

**Author:** ![Jason\_Slater](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jason_slater/32/63484_2.png) [@Jason\_Slater](https://discuss.elastic.co/u/Jason_Slater)\
**Post date:** [April 19, 2021, 6:08am UTC](https://discuss.elastic.co/t/winlogbeat-to-kibana-api-failed/270530/2 "2021-04-19T06:08:08Z")

</div>

check setup.kibana.host in your winlogbeat.yml file as a first step. is it uncommented? what value do you have in this field?

```
# =================================== Kibana ===================================

# Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API.
# This requires a Kibana endpoint configuration.
setup.kibana:

  # Kibana Host
  # Scheme and port can be left out and will be set to the default (http and 5601)
  # In case you specify and additional path, the scheme is required: http://localhost:5601/path
  # IPv6 addresses should always be defined as: https://[2001:db8::1]:5601
  #host: "localhost:5601"
```

---

<div class="post-metadata">

**Author:** ![Coeus.IT](https://avatars.discourse-cdn.com/v4/letter/c/d07c76/32.png) [@Coeus.IT](https://discuss.elastic.co/u/Coeus.IT)\
**Post date:** [April 19, 2021, 6:55am UTC](https://discuss.elastic.co/t/winlogbeat-to-kibana-api-failed/270530/3 "2021-04-19T06:55:47Z")

</div>

Hi Jason,

Thanks for reply.

I have removed comment on Kibana and Elaticsearch.output and pointing it to ELK server's IP.  
For the authentication credentials, I have put username and password for "elastic" which I've generated in ELK when I enabled "xpack.security.enabled: true".  
Does this causing the issue?

Much appreciate if could assist.

---

<div class="post-metadata">

**Author:** ![Coeus.IT](https://avatars.discourse-cdn.com/v4/letter/c/d07c76/32.png) [@Coeus.IT](https://discuss.elastic.co/u/Coeus.IT)\
**Post date:** [April 20, 2021, 4:41am UTC](https://discuss.elastic.co/t/winlogbeat-to-kibana-api-failed/270530/4 "2021-04-20T04:41:49Z")

</div>

Exiting: error connecting to Kibana: fail to get the kibana version: HTTP GET request to http://:5601/api/status fails: fail to execute the HTTP GET request: Get "http://:5601/api/status": dial tcp :5601: connectex: No connection could be made because the target machine actively refused it.. Response: .

---

<div class="post-metadata">

**Author:** ![Coeus.IT](https://avatars.discourse-cdn.com/v4/letter/c/d07c76/32.png) [@Coeus.IT](https://discuss.elastic.co/u/Coeus.IT)\
**Post date:** [April 20, 2021, 5:24am UTC](https://discuss.elastic.co/t/winlogbeat-to-kibana-api-failed/270530/5 "2021-04-20T05:24:21Z")

</div>

My winlogbeat.yml:

====Dashboards====  
setup.dashboards.enabled: true

====Kibana====  
setup.kibana:  
host: "ELK IP: 5601"

----Elasticsearch Output----  
output.elasticsearch:  
hosts: ["ELK IP:9200"]

Installed winlogbeat as service. Started service.  
Powershell (run as admin)  
.\winlogbeat.exe setup (after this command execute the error message was out/ target machine actively refused)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 18, 2021, 5:24am UTC](https://discuss.elastic.co/t/winlogbeat-to-kibana-api-failed/270530/6 "2021-05-18T05:24:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.