My understanding is that this means it is accepting input from the web server filebeat on port 5044 and spiting out the output to elasticsearch on port 9200.
When I run the logstash docker container, here is what I run:
docker run -d -p 9600:9600 -p 5044:5044 --rm --name=logstash --link elasticsearch:elasticsearch --network elastic-network -v $PWD/logstash.docker.yml:/usr/share/logstash/config/logstash.yml -v $PWD/pipeline/logstash.conf:/usr/share/logstash/pipeline/logstash.conf docker.elastic.co/logstash/logstash:7.3.2
This should allow it to accept input on port 5044 and map the yml and conf files to the local container, overwriting the default.
docker logs logstash:
OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by com.headius.backport9.modules.Modules (file:/usr/share/logstash/logstash-core/lib/jars/jruby-complete-9.2.7.0.jar) to field java.io.FileDescriptor.fd
WARNING: Please consider reporting this to the maintainers of com.headius.backport9.modules.Modules
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
Thread.exclusive is deprecated, use Thread::Mutex
Sending Logstash logs to /usr/share/logstash/logs which is now configured via log4j2.properties
{"level":"INFO","loggerName":"logstash.setting.writabledirectory","timeMillis":1570031097370,"thread":"main","logEvent":{"message":"Creating directory","setting":"path.queue","path":"/usr/share/logstash/data/queue"}}
{"level":"INFO","loggerName":"logstash.setting.writabledirectory","timeMillis":1570031097460,"thread":"main","logEvent":{"message":"Creating directory","setting":"path.dead_letter_queue","path":"/usr/share/logstash/data/dead_letter_queue"}}
{"level":"INFO","loggerName":"logstash.runner","timeMillis":1570031097806,"thread":"LogStash::Runner","logEvent":{"message":"Starting Logstash","logstash.version":"7.3.2"}}
{"level":"INFO","loggerName":"logstash.agent","timeMillis":1570031097825,"thread":"LogStash::Runner","logEvent":{"message":"No persistent UUID file found. Generating new UUID","uuid":"7062e2e7-ed1c-4865-b482-97f8faecd6f4","path":"/usr/share/logstash/data/uuid"}}
{"level":"INFO","loggerName":"org.reflections.Reflections","timeMillis":1570031098759,"thread":"Converge PipelineAction::Create","logEvent":{"message":"Reflections took 31 ms to scan 1 urls, producing 19 keys and 39 values "}}
{"level":"INFO","loggerName":"logstash.outputs.elasticsearch","timeMillis":1570031099634,"thread":"[main]-pipeline-manager","logEvent":{"message":"Elasticsearch pool URLs updated","changes":{"added":[{"metaClass":{"metaClass":{"metaClass":{"changes":"{:removed=>, :added=>[http://1.2.3.4:9200/]}"}}}}]}}}
{"level":"WARN","loggerName":"logstash.outputs.elasticsearch","timeMillis":1570031099900,"thread":"[main]-pipeline-manager","logEvent":{"message":"Restored connection to ES instance","url":"http://10.160.65.33:9200/"}}
{"level":"INFO","loggerName":"logstash.outputs.elasticsearch","timeMillis":1570031099935,"thread":"[main]-pipeline-manager","logEvent":{"message":"ES Output version determined","es_version":7}}
{"level":"WARN","loggerName":"logstash.outputs.elasticsearch","timeMillis":1570031099937,"thread":"[main]-pipeline-manager","logEvent":{"message":"Detected a 6.x and above cluster: the type event field won't be used to determine the document _type","es_version":7}}
{"level":"INFO","loggerName":"logstash.outputs.elasticsearch","timeMillis":1570031099952,"thread":"[main]-pipeline-manager","logEvent":{"message":"New Elasticsearch output","class":"LogStash::Outputs::ElasticSearch","hosts":["//1.2.3.4:9200"]}}
{"level":"INFO","loggerName":"logstash.outputs.elasticsearch","timeMillis":1570031100029,"thread":"Ruby-0-Thread-5: :1","logEvent":{"message":"Using default mapping template"}}
{"level":"WARN","loggerName":"org.logstash.instrument.metrics.gauge.LazyDelegatingGauge","timeMillis":1570031100053,"thread":"[main]-pipeline-manager","logEvent":{"message":"A gauge metric of an unknown type (org.jruby.specialized.RubyArrayOneObject) has been create for key: cluster_uuids. This may result in invalid serialization. It is recommended to log an issue to the responsible developer/development team."}}
{"level":"INFO","loggerName":"logstash.javapipeline","timeMillis":1570031100056,"thread":"[main]-pipeline-manager","logEvent":{"message":"Starting pipeline","pipeline_id":"main","pipeline.workers":8,"pipeline.batch.size":125,"pipeline.batch.delay":50,"pipeline.max_inflight":1000,"thread":"#<Thread:0x161fa23e run>"}}
{"level":"INFO","loggerName":"logstash.outputs.elasticsearch","timeMillis":1570031100113,"thread":"Ruby-0-Thread-5: :1","logEvent":{"message":"Attempting to install template","manage_template":{"index_patterns":"logstash-","version":60001,"settings":{"index.refresh_interval":"5s","number_of_shards":1},"mappings":{"dynamic_templates":[{"message_field":{"path_match":"message","match_mapping_type":"string","mapping":{"type":"text","norms":false}}},{"string_fields":{"match":"","match_mapping_type":"string","mapping":{"type":"text","norms":false,"fields":{"keyword":{"type":"keyword","ignore_above":256}}}}}],"properties":{"@timestamp":{"type":"date"},"@version":{"type":"keyword"},"geoip":{"dynamic":true,"properties":{"ip":{"type":"ip"},"location":{"type":"geo_point"},"latitude":{"type":"half_float"},"longitude":{"type":"half_float"}}}}}}}}
{"level":"INFO","loggerName":"logstash.inputs.beats","timeMillis":1570031100547,"thread":"[main]-pipeline-manager","logEvent":{"message":"Beats inputs: Starting input listener","address":"0.0.0.0:5044"}}
{"level":"INFO","loggerName":"logstash.javapipeline","timeMillis":1570031100557,"thread":"[main]-pipeline-manager","logEvent":{"message":"Pipeline started","pipeline.id":"main"}}
{"level":"INFO","loggerName":"org.logstash.beats.Server","timeMillis":1570031100628,"thread":"[main]<beats","logEvent":{"message":"Starting server on port: 5044"}}
{"level":"INFO","loggerName":"logstash.agent","timeMillis":1570031100628,"thread":"Ruby-0-Thread-1: /usr/share/logstash/lib/bootstrap/environment.rb:6","logEvent":{"message":"Pipelines running","count":1,"running_pipelines":[{"metaClass":{"metaClass":{"metaClass":{"running_pipelines":"[:main]","non_running_pipelines":}}}}]}}
{"level":"INFO","loggerName":"logstash.agent","timeMillis":1570031100827,"thread":"Api Webserver","logEvent":{"message":"Successfully started Logstash API endpoint","port":9600}}
