# MetricBeat doesnt find a compatible ElasticSearch version

**URL:** <https://forum.opensearch.org/t/metricbeat-doesnt-find-a-compatible-elasticsearch-version/23802>\
**Category:** OpenSearch\
**Tags:** troubleshoot, install\
**Created:** [March 17, 2025, 9:58am UTC](https://forum.opensearch.org/t/metricbeat-doesnt-find-a-compatible-elasticsearch-version/23802 "2025-03-17T09:58:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Karnag](https://avatars.discourse-cdn.com/v4/letter/k/e9a140/32.png) [@Karnag](https://forum.opensearch.org/u/Karnag)\
**Post date:** [March 17, 2025, 9:58am UTC](https://forum.opensearch.org/t/metricbeat-doesnt-find-a-compatible-elasticsearch-version/23802/1 "2025-03-17T09:58:22Z")

</div>

I’m trying to install OpenSearch stack to ship data and visualize then on their Dashboard. Everything is locally for now. Everything with the lastest version.

I have installed Core, Dashboard and the service run.

Next I want to send metrics to follow CPU, RAM, Disk, Network… with MetricBeat OSS. I have setup Core to mimic Elasticsearch7 beacause it’s seems to not reconize OpenSearch as it is.

```bash
curl -X GET "http://localhost:9200"
{
  "name" : "node-1",
  "cluster_name" : "opensearch-demo",
  "cluster_uuid" : "MdYUP-7gTrqKf58qW8XY7g",
  "version" : {
    "number" : "7.10.2",
    "build_type" : "rpm",
    "build_hash" : "2e4741fb45d1b150aaeeadf66d41445b23ff5982",
    "build_date" : "2025-02-27T01:16:53.890803852Z",
    "build_snapshot" : false,
    "lucene_version" : "9.12.1",
    "minimum_wire_compatibility_version" : "7.10.0",
    "minimum_index_compatibility_version" : "7.0.0"
  },
  "tagline" : "The OpenSearch Project: https://opensearch.org/"
}

```

When I run metricbeat I keep havig this error :

```json
{
   "log.level":"error",
   "@timestamp":"2025-03-14T14:26:42.758+0100",
   "log.logger":"publisher_pipeline_output",
   "log.origin":{
      "function":"github.com/elastic/beats/v7/libbeat/publisher/pipeline.(*netClientWorker).run",
      "file.name":"pipeline/client_worker.go",
      "file.line":149
   },
   "message":"Failed to connect to backoff(elasticsearch(http://10.29.165.222:9200)): Connection marked as failed because the onConnect callback failed: could not connect to a compatible version of Elasticsearch: 400 Bad Request: {\"error\":{\"root_cause\":[{\"type\":\"invalid_index_name_exception\",\"reason\":\"Invalid index name [_license], must not start with '_'.\",\"index\":\"_license\",\"index_uuid\":\"_na_\"}],\"type\":\"invalid_index_name_exception\",\"reason\":\"Invalid index name [_license], must not start with '_'.\",\"index\":\"_license\",\"index_uuid\":\"_na_\"},\"status\":400}",
   "service.name":"metricbeat",
   "ecs.version":"1.6.0"
}

```

Here my metricBeat conf :

`sudo nano /etc/metricbeat/metricbeat.yml`

```yaml
metricbeat.config.modules:
  # Glob pattern for configuration loading
  path: ${path.config}/modules.d/*.yml
  reload.enabled: false
  module: system
  period: 10s
  metricsets:
    - cpu
    - memory
    - process
    - filesystem
    - network
  enabled: true
  xpack.enabled: false

setup.dashboards.enabled: false
setup.ilm.enabled: false
setup.template.enabled: false
setup.template.settings:
  index.number_of_shards: 1

output.elasticsearch:
  # Array of hosts to connect to.
  hosts: ["10.29.165.222:9200"]
  protocol: "http"
  preset: balanced
  username: "admin"
  password: "admin"

processors:
  - add_host_metadata: ~
  - add_cloud_metadata: ~
  - add_docker_metadata: ~
  - add_kubernetes_metadata: ~

monitoring.enabled: false

```

---

<div class="post-metadata">

**Author:** ![Mantas](https://avatars.discourse-cdn.com/v4/letter/m/7bcc69/32.png) [@Mantas](https://forum.opensearch.org/u/Mantas)\
**Post date:** [March 18, 2025, 11:35am UTC](https://forum.opensearch.org/t/metricbeat-doesnt-find-a-compatible-elasticsearch-version/23802/2 "2025-03-18T11:35:45Z")

</div>

Hi @Karnag,

Have you checked the following:

> [@How connect Metricbeat to Opensearch for monitoring OS and OS Dashboard?](https://forum.opensearch.org/t/how-connect-metricbeat-to-opensearch-for-monitoring-os-and-os-dashboard/10173/3):
>
> Hi @yago82, Are you trying to send Metricbeat data directly into OpenSearch? Beats does a version check to make sure that it is connecting to Elasticsearch. If you want to send traffic from Beats over to OpenSearch, you’ll want to do that via Logstash using the OpenSearch Logstash Output plugin. You can find more information on the [agents and ingestion tools documentation page](https://opensearch.org/docs/latest/clients/agents-and-ingestion-tools/index/). Another option would be to use another open source agent like Fluent Bit and send that into OpenSearch. Anurag from C…

best,  
mj

---

<div class="post-metadata">

**Author:** ![Karnag](https://avatars.discourse-cdn.com/v4/letter/k/e9a140/32.png) [@Karnag](https://forum.opensearch.org/u/Karnag)\
**Post date:** [March 19, 2025, 8:38am UTC](https://forum.opensearch.org/t/metricbeat-doesnt-find-a-compatible-elasticsearch-version/23802/3 "2025-03-19T08:38:13Z")

</div>

Hi @Mantas,

My issue was that OpenSearch can use Beat up to 7.12.1 and I installed the latest version. Now knowing this won’t be mentioned I’m trying to find the best alternatives to replace Metric and FileBeat.

DataPrep seems to be the Swiss knife army of all but a bit “complex” to setup compared to other solution.