After setting up the opendistro for elasticsearch stack, I tried to setup beats and push data to elastic search.
when I executed sudo filebeat setup , I got below error,
root@server1:~# sudo filebeat setup
Loaded index template
Loading dashboards (Kibana must be running and reachable)
Loaded dashboards
Exiting: 2 errors: Error checking if xpack is available: 500 Internal Server Error: {“error”:{“root_cause”:[{“type”:“security_exception”,“reason”:“Unexpected exception indices:admin/get”}],“type”:“security_exception”,“reason”:“Unexpected exception indices:admin/get”},“status”:500}; Error checking if xpack is available: 500 Internal Server Error: {“error”:{“root_cause”:[{“type”:“security_exception”,“reason”:“Unexpected exception indices:admin/get”}],“type”:“security_exception”,“reason”:“Unexpected exception indices:admin/get”},“status”:500}
Also I found below error in elasticsearch node,
odfe-node1 | [2019-03-24T05:01:37,003][ERROR][c.a.o.s.f.OpenDistroSecurityFilter] [gWC_IgA] Unexpected exception [_xpack] InvalidIndexNameException[Invalid index name [xpack], must not start with '‘.]
odfe-node1 | org.elasticsearch.indices.InvalidIndexNameException: Invalid index name [xpack], must not start with '’.
odfe-node1 | at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver$WildcardExpressionResolver.validateAliasOrIndex(IndexNameExpressionResolver.java:709) ~[elasticsearch-6.5.4.jar:6.5.4]
This is my repo for your reference,