I am failing to ship windows logs to an elastic search server using winlogbeat. The winlogbeat log error reads: "No connection could be made because the target machine actively refused it." Firewall on both server and client machines is off.
Do you see any errors in the logs of Elasticsearch?
Hi, No i am not seeing any errors on the elastic search server logs : C:\ProgramData\Elastic\Elasticsearch\logs
Could you please share you configuration formatted using
</> and the debug logs (
winlogbeat.exe -e -d "*")?
Hi now resolved. The problem was that i had not configured my elasticsearch to accept remote connections.
Now i am facing a similar challenge with logstash. It is not being seen by remote machines. How do i configure logstash to be seen by remote machines.
What is the network layout? Are you running Logstash and Beats in separate containers?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.