Arcsight Plugin Port Unopened

Elastic Stack Logstash
1

Hi.

I have the module in my logstash.yml.

modules:

  • name: arcsight
    var.kibana.host: "soc-broker06-prod-asb.ei.rutgers.edu:5601"
    var.inputs: "smartconnector"
    var.elasticsearch.hosts: "localhost:9200"
    var.input.smartconnector.port: "5000"
    var.elasticsearch.hosts: "localhost:9200"
    var.kibana.scheme: "https"
    var.kibana.ssl.enabled: "true"
    var.kibana.ssl.verification_mode: "disable"

I cannot telnet to localhost 5000, and I do not see it opened in a netstat command. No firewall is running. Anyone see what is wrong here?

There is not a lot of documentation on how plugins work. I assume I don't need input files if the settings are in the logstash.yml.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.