Beats Forwarder

Elastic Stack Beats
1

Hi all,

I am new to beats and cannot figure out how to forward Winlogbeats data from multiple servers to my master server. The master is running Elastic, Kibana, and Winlogbeats

I have installed Winlogbeats on another server and pointed it to my Elastic instance, but nothing ever shows up.

Can someone assist me with what I am missing?

Thanks,

Matt

2

Dear Matt,

Couple of things.

  1. FIrst ensure the elasticsearch server is network bound and is accessible via IP and port.
  2. Post that ensure the elasticsearch is accessible via browser from the servers where winlogbeat is deployed.
  3. once point 1 and 2 are taken care you can check for winlog beat configurations..

if you confirm 1 &2 working then attach config file for more information...

Regards,

3

Looks like port 9200 is blocked. Thank you for the quick response.

4

This topic was automatically closed after 21 days. New replies are no longer allowed.