a problem with filebeat and elasticsearch

[alireza MHZ]

hello

between the installation of filebeat and elasticsearch we should run this command :

filebeat setup --index-management -E setup.template.json.enabled=false

but after that i have this error:

2020-03-21T02:10:06.941+0430    ERROR   elasticsearch/elasticsearch.go:261      Error connecting to Elasticsearch at http://127.0.0.1:9200: Connection marked as failed because the onConnect callback failed: cannot retrieve the elasticsearch license from the /_xpack endpoint, Filebeat requires the default distribution of Elasticsearch. Please make the endpoint accessible to Filebeat so it can verify the license.: could not retrieve the license information from the cluster: 503 Service Unavailable: {"error":{"root_cause":[{"type":"master_not_discovered_exception","reason":null}],"type":"master_not_discovered_exception","reason":null},"status":503}
2020-03-21T02:10:06.942+0430    ERROR   instance/beat.go:933    Exiting: Couldn't connect to any of the configured Elasticsearch hosts. Errors: [Error connection to Elasticsearch http://127.0.0.1:9200: Connection marked as failed because the onConnect callback failed: cannot retrieve the elasticsearch license from the /_xpack endpoint, Filebeat requires the default distribution of Elasticsearch. Please make the endpoint accessible to Filebeat so it can verify the license.: could not retrieve the license information from the cluster: 503 Service Unavailable: {"error":{"root_cause":[{"type":"master_not_discovered_exception","reason":null}],"type":"master_not_discovered_exception","reason":null},"status":503}]

what can i do ?

[alireza MHZ]

problem solved with these changes:

downgrade filebeat version to : 7.2.1

and change elasticsearch installation file to oss version.

[Adrián Jesús Peña Rodríguez]

Hello alireza MHZ,

I am glad to know that the problem is solved. In these cases, when we update the version of Wazuh or Elasticsearch, it is useful to check the following links to see if we will have compatibility problems. I will leave them here to help other users:

Wazuh compatibility matrix -> https://documentation.wazuh.com/3.12/installation-guide/compatibility_matrix

Elasticsearch compatibility matrix -> https://www.elastic.co/support/matrix

If you have any other questions, don't hesitate to ask.

Regards