OpenBSD 6.3 amd64 filebeat 5.6.4p0 Running first step in Filebeat pkg-readme to load the template in ~recent ES results in failure:
##### $OpenBSD: README,v 1.2 2017/04/27 09:14:40 jasper Exp $ +----------------------------------------------------------------------- | Running filebeat-5.6.4p0 on OpenBSD +----------------------------------------------------------------------- Loading index template ====================== If Filebeat will be shipping directly into ElasticSearch, the index template needs to be loaded into the cluster first: curl -XPUT 'http://localhost:9200/_template/filebeat?pretty' \ -d@/etc/filebeat/filebeat.template.json Replace `localhost` and `9200` if required by your setup. ##### ES returns: { "error" : "Content-Type header [application/x-www-form-urlencoded] is not supported", "status" : 406 } Apparently due to https://www.elastic.co/blog/strict-content-type-checking-for-elasticsearch-rest-requests. Modifying the request to include the proper content type works. -H 'Content-Type: application/json' I see the most recent ports/sysutils/beats/filebeat/pkg/README omits this section now but it seemed useful so not sure if helpful to update. -- Darren Spruell phatbuck...@gmail.com