ERR Failed to connect: dial tcp ELK_IP_ADDRESS:9600: getsockopt: connection refused

Do you have a beats input configured in your Logstash config? If so, which port is it listening to? This is the port you should use in the filebeat config, not 9600.