Looks like someone else had the same issue: Filebeat Cisco Module: Listening on IPV6 only?
So in the cisco.yml file, I specified the host IP instead of 0.0.0.0. That seems to have helped:
netstat -nulp
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
udp 0 0 127.0.0.53:53 0.0.0.0:* -
udp 0 0 [host IP]:9002 0.0.0.0:* -
I tried to netcat a message:
$ echo ‘hello’ | nc -v -u -w 0 [host IP] 9002
Connection to [host IP] 9002 port [udp/*] succeeded!
However, I see nothing in the logs.