# ELK running on VM, not able to send logs from physical machine **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [February 16, 2023, 10:41am UTC](https://discuss.elastic.co/t/elk-running-on-vm-not-able-to-send-logs-from-physical-machine/325720 "2023-02-16T10:41:44Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![mvasuraja](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mvasuraja/32/117348_2.png) [@mvasuraja](https://discuss.elastic.co/u/mvasuraja)\ **Post date:** [February 16, 2023, 10:41am UTC](https://discuss.elastic.co/t/elk-running-on-vm-not-able-to-send-logs-from-physical-machine/325720/1 "2023-02-16T10:41:44Z")
I am running Ubuntu 22.04 on my physical machine with IP 10.180.7.188. I am also running a Ubuntu 22.04 Virtual machine with IP 10.180.5.246. I have installed the ELK version 7.6.2 on the VM. I have installed filebeat version 7.6.2 on both the physical machine and the VM. I am able to get the system logs through filebeat generated on the VM into the ELK stack and able to see it on Kibana. But I am not able to send logs from the physical machine to the VM. I know this for sure because I have stopped filebeat on the VM and refresh the Kibana view, I am not able to see fresh logs getting displayed. The VM is created using Virtualbox, with the network being attached to a Bridge adapter with name eno1. I am able to ping between the two IPs. I am able to get the kibana view on the physical machine as well, by typing [http://10.180.5.246:5601](http://10.180.5.246:5601) I have this in my filebeat.yml ```auto setup.kibana: host: "http://10.180.5.246:5601" username: " ****" password: " ****" output.elasticsearch: # Array of hosts to connect to. hosts: ["http://10.180.5.246:9200"] username: " ****" password: " ****" ``` What do I do to get the logs pumped into the VM? Thanks & Regards, ---
**Author:** ![rugenl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rugenl/32/12887_2.png) [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Post date:** [February 16, 2023, 5:17pm UTC](https://discuss.elastic.co/t/elk-running-on-vm-not-able-to-send-logs-from-physical-machine/325720/2 "2023-02-16T17:17:45Z")
Check the firewall rules of the VM, you probably need to open the ports. Also check that the services are listening on more than just localhost. ---
**Author:** ![mvasuraja](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mvasuraja/32/117348_2.png) [@mvasuraja](https://discuss.elastic.co/u/mvasuraja)\ **Post date:** [February 17, 2023, 4:04am UTC](https://discuss.elastic.co/t/elk-running-on-vm-not-able-to-send-logs-from-physical-machine/325720/3 "2023-02-17T04:04:56Z")
@rugenl Thanks for the reply. I have disabled the firewall on my VM. I have this in my elasticsearch.yml: ```auto network.host: 0.0.0.0 ``` I have also tried with ```auto transport.host:localhost transport.tcp.port: 9300 http.port:9200 network.host: 0.0.0.0 ``` Anything else that needs to be checked/ modified? As mentioned I am able to send logs through filebeat running on the local (virtual) machine but I want logs from a physical machine also to reach the server. I am a newbie when it comes to these so request you to guide me through. Thanks ---
**Author:** ![rugenl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rugenl/32/12887_2.png) [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Post date:** [February 17, 2023, 5:20am UTC](https://discuss.elastic.co/t/elk-running-on-vm-not-able-to-send-logs-from-physical-machine/325720/4 "2023-02-17T05:20:55Z")
A second physical machine, not your virtual box host? Start with port testing, either the standard curl test or nmap to port 9200, first from your virtual box host to the guest, then from outside. This isn't an elasticsearch issue, it's lab networking, doesn't matter the apps involved. And it's often not easy. ---
**Author:** ![mvasuraja](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mvasuraja/32/117348_2.png) [@mvasuraja](https://discuss.elastic.co/u/mvasuraja)\ **Post date:** [February 17, 2023, 5:32am UTC](https://discuss.elastic.co/t/elk-running-on-vm-not-able-to-send-logs-from-physical-machine/325720/5 "2023-02-17T05:32:00Z")
Find below screenshot taken on my physical machine. I am able to run curl. ![Screenshot from 2023-02-17 10-53-23](https://us1.discourse-cdn.com/elastic/original/3X/5/1/518b6f541d3e784f40a677c1268db5c44e4dfbd0.png) ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 17, 2023, 7:32am UTC](https://discuss.elastic.co/t/elk-running-on-vm-not-able-to-send-logs-from-physical-machine/325720/6 "2023-03-17T07:32:45Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.