OpenBSD 6.3 amd64
filebeat 5.6.4p0
Running first step in Filebeat pkg-readme to load the template in
~recent ES results in failure:
#####
$OpenBSD: README,v 1.2 2017/04/27 09:14:40 jasper Exp $
+-----------------------------------------------------------------------
| Running filebeat-5.6.4p0 on OpenBSD
+-----------------------------------------------------------------------
Loading index template
======================
If Filebeat will be shipping directly into ElasticSearch, the index
template needs to be loaded into the cluster first:
curl -XPUT 'http://localhost:9200/_template/filebeat?pretty' \
-d@/etc/filebeat/filebeat.template.json
Replace `localhost` and `9200` if required by your setup.
#####
ES returns:
{
"error" : "Content-Type header [application/x-www-form-urlencoded]
is not supported",
"status" : 406
}
Apparently due to
https://www.elastic.co/blog/strict-content-type-checking-for-elasticsearch-rest-requests.
Modifying the request to include the proper content type works.
-H 'Content-Type: application/json'
I see the most recent ports/sysutils/beats/filebeat/pkg/README omits
this section now but it seemed useful so not sure if helpful to
update.
--
Darren Spruell
[email protected]
