Filebeat stopped working

Joshua John Consulta

unread,

Mar 27, 2023, 6:57:49 AM3/27/23

to Wazuh mailing list

Can somebody help me with this issue of mine. I can't understand why this is always occuring.

See photos for reference:

Joshua John Consulta

unread,

Mar 27, 2023, 7:06:24 AM3/27/23

to Wazuh mailing list

This is what happened after I restart the server.

Please help me with this issue masters :(

Thanks,

Joshua

Cedrick Foko

unread,

Mar 27, 2023, 8:52:11 AM3/27/23

to Wazuh mailing list

Hi Joshua,

Thank you for using Wazuh.

The issue you are facing is related to Filebeat configuration or incorrect credentials.

To investigate further, kindly share with me the output of the following commands: systemctl status -l filebeat and journalctl -xe | grep filebeat

Also, make sure you have set the correct credentials into filebeat configuration file: /etc/filebeat/filebeat.yml

Looking forward to your feedback

Regards,

Cedrick Foko

unread,

Mar 31, 2023, 9:02:11 AM3/31/23

to Wazuh mailing list

Hello Joshua,

Something new here?

It seems your indexer is down.
In addition to the information I asked previously, it will be helpful to know your environment's information (wazuh-manager version, filebeat and wazuh indexer configuration, Operating System) and filebeat log file for further troubleshooting.