Filebeat OSS fails upgrade version 7.13, required _license index?

This morning I upgraded the filebeat-oss package from version 7.12.1 to 7.13. It was working perfectly and after uprading the package it stopped working. Now fails with the following message:

May 27 11:03:24 hostname filebeat[6466]: 2021-05-27T11:03:24.932+0200 ERROR [publisher_pipeline_output] pipeline/output.go:154 Failed to connect to backoff(elasticsearch(https://ingest:9200)): Connection marked as failed because the onConnect callback failed: could not connect to a compatible version of Elasticsearch: 400 Bad Request: {"error":{"root_cause":[{"type":"invalid_index_name_exception","reason":"Invalid index name [_license], must not start with '_'.","index_uuid":"_na_","index":"_license"}],"type":"invalid_index_name_exception","reason":"Invalid index name [_license], must not start with '_'.","index_uuid":"_na_","index":"_license"},"status":400}

Of course “_license” index is not present.

The elasticsearch cluster has this version:

Ubuntu 18.04.5 LTS
opendistro 1.13.2-1 (deb packages)
elasticsearch-oss 7.10.2

I have checked the matrix compatibility version and it should be compatible:

Anyone with same issue?
Maybe Elastic is angry with opensearch fork and is closing filebeat?

1 Like

It seems this is the code that breaks compatibility:

1 Like

@fbarbeira Yep. There seems to be a similar issue for Logstash doing similar checks. We’re working on a solution, but I don’t have an ETA yet.

2 Likes