# Detect Open ports

**URL:** <https://discuss.elastic.co/t/detect-open-ports/297832>\
**Category:** Elasticsearch\
**Created:** [February 22, 2022, 4:00am UTC](https://discuss.elastic.co/t/detect-open-ports/297832 "2022-02-22T04:00:18Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jubin03](https://avatars.discourse-cdn.com/v4/letter/j/85e7bf/32.png) [@jubin03](https://discuss.elastic.co/u/jubin03)\
**Post date:** [February 22, 2022, 4:00am UTC](https://discuss.elastic.co/t/detect-open-ports/297832/1 "2022-02-22T04:00:18Z")

</div>

I have a log message that I get once per day  
`[timestamp] | [host name]| Open ports: 80, 22,443, 8080`

A few days later I found an additional port is open  
`[timestamp] | [host name]| Open ports: 80, 22,443, 8080, **8220** `

How can I detect/get an alert from ELK logs which additional port is open?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 22, 2022, 4:00am UTC](https://discuss.elastic.co/t/detect-open-ports/297832/2 "2022-03-22T04:00:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.