How to install filebeats separately from ELK?

Question

elasticsearch

We have a working ELK on our local server. I want to install filebeat separately on my Ubuntu 20.04 machine and send my data to elastik. filebeat.yml changed minimally

# ---------------------------- Elasticsearch Output ----------------------------
output.elasticsearch:
  # Array of hosts to connect to.
  hosts: ["10.168.1.22:9200"]

  # Protocol - either http (default) or https.
  #protocol: "https"

  # Authentication credentials - either API key or username/password.
  #api_key: "id:api_key"
  username: "admin"
  password: "admin"

i manage to check connection
sudo filebeat test output

elasticsearch: 10.168.1.22:9200 ...
parse url... OK
connection...
parse host... OK
dns lookup... OK
addresses: 10.168.1.22
dial up... OK
TLS... WARN secure connection disabled
talk to server... OK
version: 7.9.1
According to the 4th step of the documentation, you need to install filebeat setup -e and here are the problems:
Exiting: error initializing publisher: error initializing processors: Unable to get in cluster configuration: unable to load in-cluster configuration, KUBERNETES_SERVICE_HOST and KUBERNETES_SERVICE_PORT must be
defined and how can filebeat be installed?

Answer 1

I had a similar problem, but it all worked out in the end.
also ran filebeat setup -e
don't remember what it says, but ignore it.
check your filebeat config.
and can you demonstrate?
it's probably in the very setting of the input data in filebit