Hi All,
I am trying to integrate elasticsearch with cisco core switch.I have done the required configuration in filebeat file and cisco module file.
But while sending logs from core switch on port 9506, getting error that server is temporarily unreachable
Requesting support to help me out to fix this issue
filebeat configuration
============================== Filebeat inputs ===============================
filebeat.inputs:
Each - is an input. Most options can be set at the input level, so
you can use different inputs for various configurations.
Below are the input specific configurations.
-
type: log
Change to true to enable this input configuration.
enabled: true
setup.kibana:
host: ":5601"
---------------------------- Elasticsearch Output ----------------------------
output.elasticsearch:
Array of hosts to connect to.
hosts: ["http://elasticsearchip:9200"]
cisco module configuration
nexus:
enabled: true
# Set which input to use between udp (default), tcp or file.
var.input: udp
var.syslog_host: filebeat host ip
var.syslog_port: 9506