Connection refused elasticsearch port 9200 on ubuntu 20.04

good afternoon guys my English is not very good but I will try to explain

myself I have a test server here at digitalocean with ubuntu 20.04 and I installed Elasticsearch for log collection on this same test server but on the test server itself is giving this connection error refused that I can not solve, I have already added rules to the firewall of that same server but to no avail, I have already deactivated the firewall and also did not work

root@ubuntu-teste-elastic-Nginx:~# auditbeat setup
Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: 
[error connecting to Elasticsearch at https://159.223.167.255:9200:
Get "https://159.223.167.255:9200": dial tcp 159.223.167.255:9200: connect: connection refused]

since i’m grateful to anyone who can contribute

By default Elasticsearch binds to localhost, which does not allow connections from other hosts. Have you configured Elasticsearch to bind to the IP address you are trying to reach? Can you share your Elasticsearch config?

Hello Christian_Dahlqvist

is linked to the IP of the Elasticsearch server itself, follows below my configuration file

# ======================== Elasticsearch Configuration =========================
#
# NOTE: Elasticsearch comes with reasonable defaults for most settings.
#       Before you set out to tweak and tune the configuration, make sure you
#       understand what are you trying to accomplish and the consequences.
#
# The primary way of configuring a node is via this file. This template lists
# the most important settings you may want to configure for a production cluster.
#
# Please consult the documentation for further information on configuration options:
# https://www.elastic.co/guide/en/elasticsearch/reference/index.html
#
# ---------------------------------- Cluster -----------------------------------
#
# Use a descriptive name for your cluster:
#
#cluster.name: my-application
#
# ------------------------------------ Node ------------------------------------
#
# Use a descriptive name for the node:
#
#node.name: node-1
#
# Add custom attributes to the node:
#
#node.attr.rack: r1
#
# ----------------------------------- Paths ------------------------------------
#
# Path to directory where to store the data (separate multiple locations by comma):
#
path.data: /var/lib/elasticsearch
#
# Path to log files:
#
path.logs: /var/log/elasticsearch
#
# ----------------------------------- Memory -----------------------------------
#
# Lock the memory on startup:
#
#bootstrap.memory_lock: true
#
# Make sure that the heap size is set to about half the memory available
# on the system and that the owner of the process is allowed to use this
# limit.
#
# Elasticsearch performs poorly when the system is swapping the memory.
#
# ---------------------------------- Network -----------------------------------
#
# By default Elasticsearch is only accessible on localhost. Set a different
# address here to expose this node on the network:
#
network.host: 159.223.167.255
#
# By default Elasticsearch listens for HTTP traffic on the first free port it
# finds starting at 9200. Set a specific HTTP port here:
#
#http.port: 9200
#
# For more information, consult the network module documentation.
#
# --------------------------------- Discovery ----------------------------------
#
# Pass an initial list of hosts to perform discovery when this node is started:
# The default list of hosts is ["127.0.0.1", "[::1]"]
#
#discovery.seed_hosts: ["host1", "host2"]
#
# Bootstrap the cluster using an initial set of master-eligible nodes:
#
#cluster.initial_master_nodes: ["node-1", "node-2"]
#
# For more information, consult the discovery and cluster formation module documentation.
#
# ---------------------------------- Various -----------------------------------
#
# Allow wildcard deletion of indices:
#
#action.destructive_requires_name: false

#----------------------- BEGIN SECURITY AUTO CONFIGURATION -----------------------
#
# The following settings, TLS certificates, and keys have been automatically      
# generated to configure Elasticsearch security features on 01-04-2022 12:13:48
#
# --------------------------------------------------------------------------------

# Enable security features
xpack.security.enabled: true

xpack.security.enrollment.enabled: true

# Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents
xpack.security.http.ssl:
  enabled: true
  keystore.path: certs/http.p12

# Enable encryption and mutual authentication between cluster nodes
xpack.security.transport.ssl:
  enabled: true
  verification_mode: certificate
  keystore.path: certs/transport.p12
  truststore.path: certs/transport.p12
# Create a new cluster with the current node only
# Additional nodes can still join the cluster later
cluster.initial_master_nodes: ["ubuntu-elastic"]

# Allow HTTP API connections from localhost and local networks
# Connections are encrypted and require user authentication
http.host: [_local_, _site_]

# Allow other nodes to join the cluster from localhost and local networks
# Connections are encrypted and mutually authenticated
#transport.host: [_local_, _site_]

#----------------------- END SECURITY AUTO CONFIGURATION -------------------------

Is there anything in the Elasticsearch logs that stand out? Any errors or warnings?

Christian_Dahlqvist

i was analyzing here and apparently there's some lines here that i found talking about door 9200 and apparently it doesn't seem to be blocking

PS: one thing I forgot to mention that is the second server I go up to tests with this same problem do not know if it is something in digitalocean or some elastic update, anyway, there is nothing in the logs talking about some blocking

[2022-04-01T16:35:33,743][INFO ][o.e.x.s.a.Realms         ] [ubuntu-elastic] license mode is [trial], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]
[2022-04-01T16:35:33,756][INFO ][o.e.x.s.a.s.FileRolesStore] [ubuntu-elastic] parsed [0] roles from file [/etc/elasticsearch/roles.yml]
[2022-04-01T16:35:34,337][INFO ][o.e.x.s.InitialNodeSecurityAutoConfiguration] [ubuntu-elastic] Auto-configuration will not generate a password for the elastic built-in superuser, as we cannot  determine if there is a terminal attached to the elasticsearch process. You can use the `bin/elasticsearch-reset-password` tool to set the password for the elastic user.
[2022-04-01T16:35:35,975][INFO ][o.e.t.n.NettyAllocator   ] [ubuntu-elastic] creating NettyAllocator with the following configs: [name=elasticsearch_configured, chunk_size=1mb, suggested_max_allocation_size=1mb, factors={es.unsafe.use_netty_default_chunk_and_page_size=false, g1gc_enabled=true, g1gc_region_size=4mb}]
[2022-04-01T16:35:36,024][INFO ][o.e.i.r.RecoverySettings ] [ubuntu-elastic] using rate limit [40mb] with [default=40mb, read=0b, write=0b, max=0b]
[2022-04-01T16:35:36,092][INFO ][o.e.d.DiscoveryModule    ] [ubuntu-elastic] using discovery type [multi-node] and seed hosts providers [settings]
[2022-04-01T16:35:37,470][INFO ][o.e.n.Node               ] [ubuntu-elastic] initialized
[2022-04-01T16:35:37,471][INFO ][o.e.n.Node               ] [ubuntu-elastic] starting ...
[2022-04-01T16:35:37,495][INFO ][o.e.x.s.c.f.PersistentCache] [ubuntu-elastic] persistent cache index loaded
[2022-04-01T16:35:37,496][INFO ][o.e.x.d.l.DeprecationIndexingComponent] [ubuntu-elastic] deprecation component started
[2022-04-01T16:35:37,629][INFO ][o.e.t.TransportService   ] [ubuntu-elastic] publish_address {159.223.167.255:9300}, bound_addresses {159.223.167.255:9300}
[2022-04-01T16:35:38,384][INFO ][o.e.b.BootstrapChecks    ] [ubuntu-elastic] bound or publishing to a non-loopback address, enforcing bootstrap checks
[2022-04-01T16:35:38,410][INFO ][o.e.c.c.Coordinator      ] [ubuntu-elastic] cluster UUID [Pm0qbUsdQlicUaspiLGzEA]
[2022-04-01T16:35:38,620][INFO ][o.e.c.s.MasterService    ] [ubuntu-elastic] elected-as-master ([1] nodes joined)[{ubuntu-elastic}{5NuSwwT7R7m_zrbqii25wQ}{mibtP_8ZQ9qKlCN28bxCGw}{159.223.167.255}{159.223.167.255:9300}{cdfhilmrstw} completing election, _BECOME_MASTER_TASK_, _FINISH_ELECTION_], term: 5, version: 275, delta: master node changed {previous [], current [{ubuntu-elastic}{5NuSwwT7R7m_zrbqii25wQ}{mibtP_8ZQ9qKlCN28bxCGw}{159.223.167.255}{159.223.167.255:9300}{cdfhilmrstw}]}
[2022-04-01T16:35:38,756][INFO ][o.e.c.s.ClusterApplierService] [ubuntu-elastic] master node changed {previous [], current [{ubuntu-elastic}{5NuSwwT7R7m_zrbqii25wQ}{mibtP_8ZQ9qKlCN28bxCGw}{159.223.167.255}{159.223.167.255:9300}{cdfhilmrstw}]}, term: 5, version: 275, reason: Publication{term=5, version=275}
[2022-04-01T16:35:38,842][INFO ][o.e.h.AbstractHttpServerTransport] [ubuntu-elastic] publish_address {10.10.0.5:9200}, bound_addresses {[::1]:9200}, {127.0.0.1:9200}, {10.116.0.2:9200}, {10.10.0.5:9200}
[2022-04-01T16:35:38,843][INFO ][o.e.n.Node               ] [ubuntu-elastic] started
[2022-04-01T16:35:39,756][INFO ][o.e.l.LicenseService     ] [ubuntu-elastic] license [083bd0e9-a418-479c-906f-72301ade333c] mode [basic] - valid
[2022-04-01T16:35:39,758][INFO ][o.e.x.s.a.Realms         ] [ubuntu-elastic] license mode is [basic], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]
[2022-04-01T16:35:39,781][INFO ][o.e.g.GatewayService     ] [ubuntu-elastic] recovered [18] indices into cluster_state
[2022-04-01T16:35:42,259][INFO ][o.e.i.g.DatabaseNodeService] [ubuntu-elastic] retrieve geoip database [GeoLite2-ASN.mmdb] from [.geoip_databases] to [/tmp/elasticsearch-1543495819818273648/geoip-databases/5NuSwwT7R7m_zrbqii25wQ/GeoLite2-ASN.mmdb.tmp.gz]
[2022-04-01T16:35:42,261][INFO ][o.e.i.g.DatabaseNodeService] [ubuntu-elastic] retrieve geoip database [GeoLite2-Country.mmdb] from [.geoip_databases] to [/tmp/elasticsearch-1543495819818273648/geoip-databases/5NuSwwT7R7m_zrbqii25wQ/GeoLite2-Country.mmdb.tmp.gz]
[2022-04-01T16:35:42,265][INFO ][o.e.i.g.DatabaseNodeService] [ubuntu-elastic] retrieve geoip database [GeoLite2-City.mmdb] from [.geoip_databases] to [/tmp/elasticsearch-1543495819818273648/geoip-databases/5NuSwwT7R7m_zrbqii25wQ/GeoLite2-City.mmdb.tmp.gz]
[2022-04-01T16:35:42,437][INFO ][o.e.x.t.t.TransformTask  ] [ubuntu-elastic] [endpoint.metadata_united-default-1.5.0] updating state for transform to [{"task_state":"started","indexer_state":"stopped","checkpoint":1,"progress":{"docs_indexed":0,"docs_processed":0},"should_stop_at_checkpoint":false}].
[2022-04-01T16:35:42,436][INFO ][o.e.x.t.t.TransformTask  ] [ubuntu-elastic] [endpoint.metadata_current-default-1.5.0] updating state for transform to [{"task_state":"started","indexer_state":"stopped","checkpoint":1,"progress":{"docs_indexed":0,"docs_processed":0},"should_stop_at_checkpoint":false}].
[2022-04-01T16:35:42,894][INFO ][o.e.i.g.DatabaseNodeService] [ubuntu-elastic] successfully loaded geoip database file [GeoLite2-Country.mmdb]
[2022-04-01T16:35:43,017][INFO ][o.e.x.t.t.TransformPersistentTasksExecutor] [ubuntu-elastic] [endpoint.metadata_united-default-1.5.0] successfully completed and scheduled task in node operation
[2022-04-01T16:35:43,017][INFO ][o.e.i.g.DatabaseNodeService] [ubuntu-elastic] successfully loaded geoip database file [GeoLite2-ASN.mmdb]
[2022-04-01T16:35:43,131][INFO ][o.e.x.t.t.TransformPersistentTasksExecutor] [ubuntu-elastic] [endpoint.metadata_current-default-1.5.0] successfully completed and scheduled task in node operation
[2022-04-01T16:35:43,414][INFO ][o.e.c.r.a.AllocationService] [ubuntu-elastic] current.health="YELLOW" message="Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[.kibana-event-log-8.1.2-000001][0]]])." previous.health="RED" reason="shards started [[.kibana-event-log-8.1.2-000001][0]]"
[2022-04-01T16:35:44,878][INFO ][o.e.i.g.DatabaseNodeService] [ubuntu-elastic] successfully loaded geoip database file [GeoLite2-City.mmdb]
[2022-04-01T16:36:21,919][INFO ][o.e.t.LoggingTaskListener] [ubuntu-elastic] 420 finished with response BulkByScrollResponse[took=1s,timed_out=false,sliceId=null,updated=21,created=0,deleted=0,batches=1,versionConflicts=0,noops=0,retries=0,throttledUntil=0s,bulk_failures=[],search_failures=[]]
[2022-04-01T16:36:22,881][INFO ][o.e.t.LoggingTaskListener] [ubuntu-elastic] 419 finished with response BulkByScrollResponse[took=4.8s,timed_out=false,sliceId=null,updated=2273,created=0,deleted=0,batches=3,versionConflicts=0,noops=0,retries=0,throttledUntil=0s,bulk_failures=[],search_failures=[]]
[2022-04-01T16:50:42,573][INFO ][o.e.n.Node               ] [ubuntu-elastic] stopping ...
[2022-04-01T16:50:42,657][INFO ][o.e.x.w.WatcherService   ] [ubuntu-elastic] stopping watch service, reason [shutdown initiated]
[2022-04-01T16:50:42,658][INFO ][o.e.x.w.WatcherLifeCycleService] [ubuntu-elastic] watcher has stopped and shutdown
[2022-04-01T16:50:42,665][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [ubuntu-elastic] [controller/4461] [Main.cc@176] ML controller exiting
[2022-04-01T16:50:42,667][INFO ][o.e.x.m.p.NativeController] [ubuntu-elastic] Native controller process has stopped - no new native processes can be started
[2022-04-01T16:50:43,557][INFO ][o.e.n.Node               ] [ubuntu-elastic] stopped
[2022-04-01T16:50:43,557][INFO ][o.e.n.Node               ] [ubuntu-elastic] closing ...
[2022-04-01T16:50:43,637][INFO ][o.e.i.g.DatabaseReaderLazyLoader] [ubuntu-elastic] evicted [0] entries from cache after reloading database [/tmp/elasticsearch-1543495819818273648/geoip-databases/5NuSwwT7R7m_zrbqii25wQ/GeoLite2-Country.mmdb]
[2022-04-01T16:50:43,637][INFO ][o.e.i.g.DatabaseReaderLazyLoader] [ubuntu-elastic] evicted [0] entries from cache after reloading database [/tmp/elasticsearch-1543495819818273648/geoip-databases/5NuSwwT7R7m_zrbqii25wQ/GeoLite2-ASN.mmdb]
[2022-04-01T16:50:43,638][INFO ][o.e.i.g.DatabaseReaderLazyLoader] [ubuntu-elastic] evicted [0] entries from cache after reloading database [/tmp/elasticsearch-1543495819818273648/geoip-databases/5NuSwwT7R7m_zrbqii25wQ/GeoLite2-City.mmdb]
[2022-04-01T16:50:43,654][INFO ][o.e.n.Node               ] [ubuntu-elastic] closed
[2022-04-01T16:50:53,648][INFO ][o.e.n.Node               ] [ubuntu-elastic] version[8.1.2], pid[5286], build[default/deb/31df9689e80bad366ac20176aa7f2371ea5eb4c1/2022-03-29T21:18:59.991429448Z], OS[Linux/5.4.0-97-generic/amd64], JVM[Eclipse Adoptium/OpenJDK 64-Bit Server VM/17.0.2/17.0.2+8]
[2022-04-01T16:50:53,656][INFO ][o.e.n.Node               ] [ubuntu-elastic] JVM home [/usr/share/elasticsearch/jdk], using bundled JDK [true]
[2022-04-01T16:50:53,657][INFO ][o.e.n.Node               ] [ubuntu-elastic] JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -Djava.security.manager=allow, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-opens=java.base/java.io=ALL-UNNAMED, -XX:+UseG1GC, -Djava.io.tmpdir=/tmp/elasticsearch-16065161766071280388, -XX:+HeapDumpOnOutOfMemoryError, -XX:+ExitOnOutOfMemoryError, -XX:HeapDumpPath=/var/lib/elasticsearch, -XX:ErrorFile=/var/log/elasticsearch/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=/var/log/elasticsearch/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Xms1965m, -Xmx1965m, -XX:MaxDirectMemorySize=1030750208, -XX:G1HeapRegionSize=4m, -XX:InitiatingHeapOccupancyPercent=30, -XX:G1ReservePercent=15, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/etc/elasticsearch, -Des.distribution.flavor=default, -Des.distribution.type=deb, -Des.bundled_jdk=true]
[2022-04-01T16:50:57,669][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [aggs-matrix-stats]
[2022-04-01T16:50:57,670][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [analysis-common]
[2022-04-01T16:50:57,670][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [constant-keyword]
[2022-04-01T16:50:57,670][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [data-streams]
[2022-04-01T16:50:57,671][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [frozen-indices]
[2022-04-01T16:50:57,671][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [ingest-common]
[2022-04-01T16:50:57,671][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [ingest-geoip]
[2022-04-01T16:50:57,672][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [ingest-user-agent]
[2022-04-01T16:50:57,672][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [kibana]
[2022-04-01T16:50:57,672][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [lang-expression]
[2022-04-01T16:50:57,672][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [lang-mustache]
[2022-04-01T16:50:57,673][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [lang-painless]
[2022-04-01T16:50:57,673][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [legacy-geo]
[2022-04-01T16:50:57,673][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [mapper-extras]
[2022-04-01T16:50:57,673][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [mapper-version]
[2022-04-01T16:50:57,674][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [old-lucene-versions]
[2022-04-01T16:50:57,674][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [parent-join]
[2022-04-01T16:50:57,674][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [percolator]
[2022-04-01T16:50:57,674][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [rank-eval]
[2022-04-01T16:50:57,674][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [reindex]
[2022-04-01T16:50:57,675][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [repositories-metering-api]
[2022-04-01T16:50:57,675][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [repository-azure]
[2022-04-01T16:50:57,675][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [repository-encrypted]
[2022-04-01T16:50:57,675][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [repository-gcs]
[2022-04-01T16:50:57,675][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [repository-s3]
[2022-04-01T16:50:57,676][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [repository-url]
[2022-04-01T16:50:57,676][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [runtime-fields-common]
[2022-04-01T16:50:57,676][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [search-business-rules]
[2022-04-01T16:50:57,676][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [searchable-snapshots]
[2022-04-01T16:50:57,677][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [snapshot-based-recoveries]
[2022-04-01T16:50:57,677][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [snapshot-repo-test-kit]
[2022-04-01T16:50:57,677][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [spatial]
[2022-04-01T16:50:57,677][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [systemd]
[2022-04-01T16:50:57,678][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [transform]
[2022-04-01T16:50:57,678][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [transport-netty4]
[2022-04-01T16:50:57,678][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [unsigned-long]
[2022-04-01T16:50:57,678][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [vector-tile]
[2022-04-01T16:50:57,678][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [vectors]
[2022-04-01T16:50:57,679][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [wildcard]
[2022-04-01T16:50:57,679][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-aggregate-metric]
[2022-04-01T16:50:57,679][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-analytics]
[2022-04-01T16:50:57,679][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-async]
[2022-04-01T16:50:57,680][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-async-search]
[2022-04-01T16:50:57,680][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-autoscaling]
[2022-04-01T16:50:57,680][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-ccr]
[2022-04-01T16:50:57,680][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-core]
[2022-04-01T16:50:57,681][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-deprecation]
[2022-04-01T16:50:57,681][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-enrich]
[2022-04-01T16:50:57,681][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-eql]
[2022-04-01T16:50:57,681][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-fleet]
[2022-04-01T16:50:57,681][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-graph]
[2022-04-01T16:50:57,682][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-identity-provider]
[2022-04-01T16:50:57,682][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-ilm]
[2022-04-01T16:50:57,682][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-logstash]
[2022-04-01T16:50:57,682][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-ml]
[2022-04-01T16:50:57,683][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-monitoring]
[2022-04-01T16:50:57,683][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-ql]
[2022-04-01T16:50:57,683][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-rollup]
[2022-04-01T16:50:57,683][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-security]
[2022-04-01T16:50:57,684][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-shutdown]
[2022-04-01T16:50:57,684][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-sql]
[2022-04-01T16:50:57,684][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-stack]
[2022-04-01T16:50:57,684][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-text-structure]
[2022-04-01T16:50:57,684][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-voting-only-node]
[2022-04-01T16:50:57,685][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] loaded module [x-pack-watcher]
[2022-04-01T16:50:57,685][INFO ][o.e.p.PluginsService     ] [ubuntu-elastic] no plugins loaded
[2022-04-01T16:50:57,736][INFO ][o.e.e.NodeEnvironment    ] [ubuntu-elastic] using [1] data paths, mounts [[/ (/dev/vda1)]], net usable_space [72.6gb], net total_space [77.3gb], types [ext4]
[2022-04-01T16:50:57,737][INFO ][o.e.e.NodeEnvironment    ] [ubuntu-elastic] heap size [1.9gb], compressed ordinary object pointers [true]
[2022-04-01T16:50:57,849][INFO ][o.e.n.Node               ] [ubuntu-elastic] node name [ubuntu-elastic], node ID [5NuSwwT7R7m_zrbqii25wQ], cluster name [elasticsearch], roles [data_cold, data, remote_cluster_client, master, data_warm, data_content, transform, data_hot, ml, data_frozen, ingest]
[2022-04-01T16:51:05,079][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [ubuntu-elastic] [controller/5570] [Main.cc@123] controller (64 bit): Version 8.1.2 (Build aefa35c80ac77e) Copyright (c) 2022 Elasticsearch BV
[2022-04-01T16:51:05,458][INFO ][o.e.x.s.Security         ] [ubuntu-elastic] Security is enabled
[2022-04-01T16:51:05,866][INFO ][o.e.x.s.a.Realms         ] [ubuntu-elastic] license mode is [trial], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]
[2022-04-01T16:51:05,884][INFO ][o.e.x.s.a.s.FileRolesStore] [ubuntu-elastic] parsed [0] roles from file [/etc/elasticsearch/roles.yml]
[2022-04-01T16:51:06,514][INFO ][o.e.x.s.InitialNodeSecurityAutoConfiguration] [ubuntu-elastic] Auto-configuration will not generate a password for the elastic built-in superuser, as we cannot  determine if there is a terminal attached to the elasticsearch process. You can use the `bin/elasticsearch-reset-password` tool to set the password for the elastic user.
[2022-04-01T16:51:08,867][INFO ][o.e.t.n.NettyAllocator   ] [ubuntu-elastic] creating NettyAllocator with the following configs: [name=elasticsearch_configured, chunk_size=1mb, suggested_max_allocation_size=1mb, factors={es.unsafe.use_netty_default_chunk_and_page_size=false, g1gc_enabled=true, g1gc_region_size=4mb}]
[2022-04-01T16:51:08,983][INFO ][o.e.i.r.RecoverySettings ] [ubuntu-elastic] using rate limit [40mb] with [default=40mb, read=0b, write=0b, max=0b]
[2022-04-01T16:51:09,058][INFO ][o.e.d.DiscoveryModule    ] [ubuntu-elastic] using discovery type [multi-node] and seed hosts providers [settings]
[2022-04-01T16:51:10,874][INFO ][o.e.n.Node               ] [ubuntu-elastic] initialized
[2022-04-01T16:51:10,875][INFO ][o.e.n.Node               ] [ubuntu-elastic] starting ...
[2022-04-01T16:51:10,907][INFO ][o.e.x.s.c.f.PersistentCache] [ubuntu-elastic] persistent cache index loaded
[2022-04-01T16:51:10,909][INFO ][o.e.x.d.l.DeprecationIndexingComponent] [ubuntu-elastic] deprecation component started
[2022-04-01T16:51:11,132][INFO ][o.e.t.TransportService   ] [ubuntu-elastic] publish_address {159.223.167.255:9300}, bound_addresses {[::]:9300}
[2022-04-01T16:51:12,043][INFO ][o.e.b.BootstrapChecks    ] [ubuntu-elastic] bound or publishing to a non-loopback address, enforcing bootstrap checks
[2022-04-01T16:51:12,153][INFO ][o.e.c.c.Coordinator      ] [ubuntu-elastic] cluster UUID [Pm0qbUsdQlicUaspiLGzEA]
[2022-04-01T16:51:12,574][INFO ][o.e.c.s.MasterService    ] [ubuntu-elastic] elected-as-master ([1] nodes joined)[{ubuntu-elastic}{5NuSwwT7R7m_zrbqii25wQ}{DLGi50xdTzWSLm-dTdroKg}{159.223.167.255}{159.223.167.255:9300}{cdfhilmrstw} completing election, _BECOME_MASTER_TASK_, _FINISH_ELECTION_], term: 6, version: 301, delta: master node changed {previous [], current [{ubuntu-elastic}{5NuSwwT7R7m_zrbqii25wQ}{DLGi50xdTzWSLm-dTdroKg}{159.223.167.255}{159.223.167.255:9300}{cdfhilmrstw}]}
[2022-04-01T16:51:12,947][INFO ][o.e.c.s.ClusterApplierService] [ubuntu-elastic] master node changed {previous [], current [{ubuntu-elastic}{5NuSwwT7R7m_zrbqii25wQ}{DLGi50xdTzWSLm-dTdroKg}{159.223.167.255}{159.223.167.255:9300}{cdfhilmrstw}]}, term: 6, version: 301, reason: Publication{term=6, version=301}
[2022-04-01T16:51:13,535][INFO ][o.e.h.AbstractHttpServerTransport] [ubuntu-elastic] publish_address {10.10.0.5:9200}, bound_addresses {[::1]:9200}, {127.0.0.1:9200}, {10.116.0.2:9200}, {10.10.0.5:9200}
[2022-04-01T16:51:13,537][INFO ][o.e.n.Node               ] [ubuntu-elastic] started
[2022-04-01T16:51:14,045][INFO ][o.e.l.LicenseService     ] [ubuntu-elastic] license [083bd0e9-a418-479c-906f-72301ade333c] mode [basic] - valid
[2022-04-01T16:51:14,046][INFO ][o.e.x.s.a.Realms         ] [ubuntu-elastic] license mode is [basic], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]
[2022-04-01T16:51:14,068][INFO ][o.e.g.GatewayService     ] [ubuntu-elastic] recovered [18] indices into cluster_state
[2022-04-01T16:51:15,868][INFO ][o.e.i.g.DatabaseNodeService] [ubuntu-elastic] retrieve geoip database [GeoLite2-ASN.mmdb] from [.geoip_databases] to [/tmp/elasticsearch-16065161766071280388/geoip-databases/5NuSwwT7R7m_zrbqii25wQ/GeoLite2-ASN.mmdb.tmp.gz]
[2022-04-01T16:51:15,870][INFO ][o.e.i.g.DatabaseNodeService] [ubuntu-elastic] retrieve geoip database [GeoLite2-City.mmdb] from [.geoip_databases] to [/tmp/elasticsearch-16065161766071280388/geoip-databases/5NuSwwT7R7m_zrbqii25wQ/GeoLite2-City.mmdb.tmp.gz]
[2022-04-01T16:51:15,873][INFO ][o.e.i.g.DatabaseNodeService] [ubuntu-elastic] retrieve geoip database [GeoLite2-Country.mmdb] from [.geoip_databases] to [/tmp/elasticsearch-16065161766071280388/geoip-databases/5NuSwwT7R7m_zrbqii25wQ/GeoLite2-Country.mmdb.tmp.gz]
[2022-04-01T16:51:16,426][INFO ][o.e.x.t.t.TransformTask  ] [ubuntu-elastic] [endpoint.metadata_united-default-1.5.0] updating state for transform to [{"task_state":"started","indexer_state":"stopped","checkpoint":1,"progress":{"docs_indexed":0,"docs_processed":0},"should_stop_at_checkpoint":false}].
[2022-04-01T16:51:16,423][INFO ][o.e.x.t.t.TransformTask  ] [ubuntu-elastic] [endpoint.metadata_current-default-1.5.0] updating state for transform to [{"task_state":"started","indexer_state":"stopped","checkpoint":1,"progress":{"docs_indexed":0,"docs_processed":0},"should_stop_at_checkpoint":false}].
[2022-04-01T16:51:16,584][INFO ][o.e.x.t.t.TransformPersistentTasksExecutor] [ubuntu-elastic] [endpoint.metadata_united-default-1.5.0] successfully completed and scheduled task in node operation
[2022-04-01T16:51:16,606][INFO ][o.e.c.r.a.AllocationService] [ubuntu-elastic] current.health="YELLOW" message="Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[.ds-ilm-history-5-2022.04.01-000001][0], [.kibana-event-log-8.1.2-000001][0]]])." previous.health="RED" reason="shards started [[.ds-ilm-history-5-2022.04.01-000001][0], [.kibana-event-log-8.1.2-000001][0]]"
[2022-04-01T16:51:16,652][INFO ][o.e.i.g.DatabaseNodeService] [ubuntu-elastic] successfully loaded geoip database file [GeoLite2-Country.mmdb]
[2022-04-01T16:51:16,801][INFO ][o.e.x.t.t.TransformPersistentTasksExecutor] [ubuntu-elastic] [endpoint.metadata_current-default-1.5.0] successfully completed and scheduled task in node operation
[2022-04-01T16:51:16,863][INFO ][o.e.i.g.DatabaseNodeService] [ubuntu-elastic] successfully loaded geoip database file [GeoLite2-ASN.mmdb]
[2022-04-01T16:51:18,996][INFO ][o.e.i.g.DatabaseNodeService] [ubuntu-elastic] successfully loaded geoip database file [GeoLite2-City.mmdb]

Wonder if the IP address you are using might need to be added as I see this in the logs:

[2022-04-01T16:35:38,842][INFO ][o.e.h.AbstractHttpServerTransport] [ubuntu-elastic] publish_address {10.10.0.5:9200}, bound_addresses {[::1]:9200}, {127.0.0.1:9200}, {10.116.0.2:9200}, {10.10.0.5:9200}

so I have to add the IP address also in this field???

I would try that.

I'm almost giving up, when I enabled http.port pointing to the IP address of elastic, gave this error ai now, but commented again the line http.port but the error persists now, I did not make any change in kibana.yml, only in Elasticsearch.yml in the line http.port

kibana_error

errors logs kibana

{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:23:25.382+00:00","message":"Setting up [112] plugins: [translations,licensing,globalSearch,globalSearchProviders,features,mapsEms,licenseApiGuard,usageCollection,taskManager,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,sharedUX,share,embeddable,uiActionsEnhanced,screenshotMode,screenshotting,banners,telemetry,newsfeed,fieldFormats,expressions,dataViews,charts,esUiShared,bfetch,data,savedObjects,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,watcher,licenseManagement,advancedSettings,spaces,security,savedObjectsTagging,reporting,lists,fileUpload,ingestPipelines,encryptedSavedObjects,dataEnhanced,cloud,snapshotRestore,eventLog,actions,alerting,triggersActionsUi,transform,stackAlerts,ruleRegistry,savedObjectsManagement,console,controls,graph,fleet,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,visualizations,canvas,visTypeXy,visTypeVislib,visTypeVega,visTypeTimeseries,rollup,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypeMetric,visTypeHeatmap,visTypeMarkdown,dashboard,maps,dashboardEnhanced,expressionTagcloud,expressionPie,visTypePie,expressionMetricVis,expressionHeatmap,expressionGauge,dataViewFieldEditor,lens,cases,timelines,discover,osquery,observability,discoverEnhanced,dataVisualizer,ml,uptime,securitySolution,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,apm,dataViewManagement]","log":{"level":"INFO","logger":"plugins-system.standard"},"process":{"pid":1859},"trace":{"id":"60e702579126ad1b21d2e43c5b440ed5"},"transaction":{"id":"e1a738a8f9a19a2d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:23:25.403+00:00","message":"TaskManager is identified by the Kibana UUID: c70bee51-986a-4f13-9d3b-ea8d50deb5c3","log":{"level":"INFO","logger":"plugins.taskManager"},"process":{"pid":1859},"trace":{"id":"60e702579126ad1b21d2e43c5b440ed5"},"transaction":{"id":"e1a738a8f9a19a2d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:23:25.606+00:00","message":"Session cookies will be transmitted over insecure connections. This is not recommended.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":1859},"trace":{"id":"60e702579126ad1b21d2e43c5b440ed5"},"transaction":{"id":"e1a738a8f9a19a2d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:23:25.641+00:00","message":"Session cookies will be transmitted over insecure connections. This is not recommended.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":1859},"trace":{"id":"60e702579126ad1b21d2e43c5b440ed5"},"transaction":{"id":"e1a738a8f9a19a2d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:23:25.762+00:00","message":"Installing common resources shared between all indices","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":1859},"trace":{"id":"60e702579126ad1b21d2e43c5b440ed5"},"transaction":{"id":"e1a738a8f9a19a2d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:23:27.226+00:00","message":"Chromium sandbox provides an additional layer of protection, and is supported for Linux Ubuntu 20.04 OS. Automatically enabling Chromium sandbox.","log":{"level":"INFO","logger":"plugins.screenshotting.config"},"process":{"pid":1859},"trace":{"id":"60e702579126ad1b21d2e43c5b440ed5"},"transaction":{"id":"e1a738a8f9a19a2d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:23:28.516+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 10.116.0.2:9200","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":1859},"trace":{"id":"60e702579126ad1b21d2e43c5b440ed5"},"transaction":{"id":"e1a738a8f9a19a2d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:23:33.023+00:00","message":"Browser executable: /usr/share/kibana/x-pack/plugins/screenshotting/chromium/headless_shell-linux_x64/headless_shell","log":{"level":"INFO","logger":"plugins.screenshotting.chromium"},"process":{"pid":1859},"trace":{"id":"60e702579126ad1b21d2e43c5b440ed5"},"transaction":{"id":"e1a738a8f9a19a2d"}}
{"process":{"pid":1950,"path":"/run/kibana/kibana.pid"},"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:26:55.626+00:00","message":"pid file already exists at /run/kibana/kibana.pid","log":{"level":"WARN","logger":"environment"},"trace":{"id":"7eea6aa939aba1161d891a51649d2302"},"transaction":{"id":"2633b838d7c05a4f"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:27:08.525+00:00","message":"Plugin \"metricsEntities\" is disabled.","log":{"level":"INFO","logger":"plugins-service"},"process":{"pid":1950},"trace":{"id":"7eea6aa939aba1161d891a51649d2302"},"transaction":{"id":"2633b838d7c05a4f"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:27:08.655+00:00","message":"http server running at http://159.223.167.255:5601","log":{"level":"INFO","logger":"http.server.Preboot"},"process":{"pid":1950},"trace":{"id":"7eea6aa939aba1161d891a51649d2302"},"transaction":{"id":"2633b838d7c05a4f"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:27:08.753+00:00","message":"Setting up [1] plugins: [interactiveSetup]","log":{"level":"INFO","logger":"plugins-system.preboot"},"process":{"pid":1950},"trace":{"id":"7eea6aa939aba1161d891a51649d2302"},"transaction":{"id":"2633b838d7c05a4f"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:27:08.824+00:00","message":"The default mechanism for Reporting privileges will work differently in future versions, which will affect the behavior of this cluster. Set \"xpack.reporting.roles.enabled\" to \"false\" to adopt the future behavior before upgrading.","log":{"level":"WARN","logger":"config.deprecation"},"process":{"pid":1950},"trace":{"id":"90c201ad5ef8a540b4bc1eb2a9cc5eaf"},"transaction":{"id":"a6823a7219881e8b"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:27:09.079+00:00","message":"Setting up [112] plugins: [translations,licensing,globalSearch,globalSearchProviders,features,mapsEms,licenseApiGuard,usageCollection,taskManager,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,sharedUX,share,embeddable,uiActionsEnhanced,screenshotMode,screenshotting,banners,telemetry,newsfeed,fieldFormats,expressions,dataViews,charts,esUiShared,bfetch,data,savedObjects,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,watcher,licenseManagement,advancedSettings,spaces,security,savedObjectsTagging,reporting,lists,fileUpload,ingestPipelines,encryptedSavedObjects,dataEnhanced,cloud,snapshotRestore,eventLog,actions,alerting,triggersActionsUi,transform,stackAlerts,ruleRegistry,savedObjectsManagement,console,controls,graph,fleet,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,visualizations,canvas,visTypeXy,visTypeVislib,visTypeVega,visTypeTimeseries,rollup,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypeMetric,visTypeHeatmap,visTypeMarkdown,dashboard,maps,dashboardEnhanced,expressionTagcloud,expressionPie,visTypePie,expressionMetricVis,expressionHeatmap,expressionGauge,dataViewFieldEditor,lens,cases,timelines,discover,osquery,observability,discoverEnhanced,dataVisualizer,ml,uptime,securitySolution,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,apm,dataViewManagement]","log":{"level":"INFO","logger":"plugins-system.standard"},"process":{"pid":1950},"trace":{"id":"90c201ad5ef8a540b4bc1eb2a9cc5eaf"},"transaction":{"id":"a6823a7219881e8b"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:27:09.107+00:00","message":"TaskManager is identified by the Kibana UUID: c70bee51-986a-4f13-9d3b-ea8d50deb5c3","log":{"level":"INFO","logger":"plugins.taskManager"},"process":{"pid":1950},"trace":{"id":"90c201ad5ef8a540b4bc1eb2a9cc5eaf"},"transaction":{"id":"a6823a7219881e8b"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:27:09.337+00:00","message":"Session cookies will be transmitted over insecure connections. This is not recommended.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":1950},"trace":{"id":"90c201ad5ef8a540b4bc1eb2a9cc5eaf"},"transaction":{"id":"a6823a7219881e8b"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:27:09.378+00:00","message":"Session cookies will be transmitted over insecure connections. This is not recommended.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":1950},"trace":{"id":"90c201ad5ef8a540b4bc1eb2a9cc5eaf"},"transaction":{"id":"a6823a7219881e8b"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:27:09.495+00:00","message":"Installing common resources shared between all indices","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":1950},"trace":{"id":"90c201ad5ef8a540b4bc1eb2a9cc5eaf"},"transaction":{"id":"a6823a7219881e8b"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:27:10.506+00:00","message":"Chromium sandbox provides an additional layer of protection, and is supported for Linux Ubuntu 20.04 OS. Automatically enabling Chromium sandbox.","log":{"level":"INFO","logger":"plugins.screenshotting.config"},"process":{"pid":1950},"trace":{"id":"90c201ad5ef8a540b4bc1eb2a9cc5eaf"},"transaction":{"id":"a6823a7219881e8b"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:27:11.318+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 10.116.0.2:9200","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":1950},"trace":{"id":"90c201ad5ef8a540b4bc1eb2a9cc5eaf"},"transaction":{"id":"a6823a7219881e8b"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-01T19:27:15.163+00:00","message":"Browser executable: /usr/share/kibana/x-pack/plugins/screenshotting/chromium/headless_shell-linux_x64/headless_shell","log":{"level":"INFO","logger":"plugins.screenshotting.chromium"},"process":{"pid":1950},"trace":{"id":"90c201ad5ef8a540b4bc1eb2a9cc5eaf"},"transaction":{"id":"a6823a7219881e8b"}}

5601 is the port of Kibana, not Elasticsearch. Do you have Kibana set up on the same host? Have you configured it correctly?

yes, on the same host for testing, I set up correctly, I can not understand why now this does not want to work

Christian_Dahlqvist
i did the following redid another server here from 0 and I will try to configure here the audibeat and filebeat on it in case I have some difficulty I put here again OK
i greatly appreciate your help

hello Christian_Dahlqvist how are you?

I leave this message here for the sake of knowledge in case anyone is experiencing this problem, which in my case here in my testing environment with Elasticsearch, I did a test on my local computer with virtualbox with an ubuntu 20.04 machine with Elasticsearch and kibana and another ubuntu machine also version 20.04 installed Nginx for testing and when I installed and started the filebeat that I am testing for log collection, it worked at the same time, that is, the servers I was testing are on digitalocean and it is probably blocking Elasticsearch ports 9200 and also the 5601 from kibana, anyway, I send the message to let you know that I discovered the problem of blocking these ports and OK
Grateful

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.