0

talk to server... ERROR Connection marked as failed because the onConnect callback failed: could not connect to a compatible version of Elasticsearch: 400 Bad Request: {"error":{"root_cause":[{"type":"invalid_index_name_exception","reason":"Invalid index name [_license], must not start with '_'.","index":"_license","index_uuid":"_na_"}],"type":"invalid_index_name_exception","reason":"Invalid index name [_license], must not start with '_'.","index":"_license","index_uuid":"_na_"},"status":400}

I'm encountering the error mentioned above when I run the 'filebeat test output' command on my Wazuh master node. I have no idea where the error is coming from.

Wazuh Indexer version : 4.5.0-1 Filebeat version : 7.17.12 Elasticsearch version in the Wazuh Indexer: 7.10.2

ibrahim demet
  • 89
  • 11

1 Answers1

0

You need to use Filebeat 7.10.2 because 7.17.12 is not compatible with ES 7.10.2 as it will make API calls (to check the license) that 7.10.2 does not understand.

Val
  • 207,596
  • 13
  • 358
  • 360