# Error filebeast from Windows machine to vmware Ubuntu machine **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [January 18, 2016, 11:39am UTC](https://discuss.elastic.co/t/error-filebeast-from-windows-machine-to-vmware-ubuntu-machine/39442 "2016-01-18T11:39:45Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![carmelom](https://avatars.discourse-cdn.com/v4/letter/c/e19adc/32.png) [@carmelom](https://discuss.elastic.co/u/carmelom)\ **Post date:** [January 18, 2016, 11:39am UTC](https://discuss.elastic.co/t/error-filebeast-from-windows-machine-to-vmware-ubuntu-machine/39442/1 "2016-01-18T11:39:45Z")
Good Morning, I am trying to send logs from filebeats (in a windows machine) to logstash (in a vmware ubuntu machine) but I got this error: `Connecting error publishing events (retrying): dial tcp 192.168.220.130:5044: connectex: No connection could be made because the target machine actively refused it.` The configuration is : **filebeat.yml** in a **windows** machine: `output: logstash: hosts: ["192.168.220.130:5044"] index : filebeat console: pretty: true worker: 1` **logstash.config** in a **vmware ubuntu** machine : `input { lumberjack { port => 5044 type => beats ssl_certificate => "/etc/ssl/logstash.pub" ssl_key => "/etc/ssl/logstash.key" } }` Any tips ? I tried the same config internally in a vmware ubuntu machine and it is working fine. ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [January 18, 2016, 11:44am UTC](https://discuss.elastic.co/t/error-filebeast-from-windows-machine-to-vmware-ubuntu-machine/39442/2 "2016-01-18T11:44:58Z")
Use the [beats input plugin](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-beats.html) to receive data from Filebeat and other beats. ---
**Author:** ![carmelom](https://avatars.discourse-cdn.com/v4/letter/c/e19adc/32.png) [@carmelom](https://discuss.elastic.co/u/carmelom)\ **Post date:** [January 18, 2016, 11:53am UTC](https://discuss.elastic.co/t/error-filebeast-from-windows-machine-to-vmware-ubuntu-machine/39442/3 "2016-01-18T11:53:26Z")
What do you mean ? this is my full config of filebeat.yml in windows ## `filebeat: prospectors: ``` paths: - c:\log\*.log input_type: log document_type: oldLogs ``` registry\_file: "c:\filebeat\registry" output: logstash: hosts: ["192.168.220.130:5044"] index : filebeat console: pretty: true worker: 1` ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [January 18, 2016, 11:57am UTC](https://discuss.elastic.co/t/error-filebeast-from-windows-machine-to-vmware-ubuntu-machine/39442/4 "2016-01-18T11:57:24Z")
Yes, but in the Logstash configuration you should use the beats input plugin, not lumberjack. You also need to make sure the that Filebeat machine can connect to port 5044 on the Logstash machine when Logstash is running, which isn't the case right now according to your error message. Perhaps a firewall is blocking the access? ---
**Author:** ![carmelom](https://avatars.discourse-cdn.com/v4/letter/c/e19adc/32.png) [@carmelom](https://discuss.elastic.co/u/carmelom)\ **Post date:** [January 18, 2016, 12:03pm UTC](https://discuss.elastic.co/t/error-filebeast-from-windows-machine-to-vmware-ubuntu-machine/39442/5 "2016-01-18T12:03:32Z")
I stopped and disabled the ubuntu firewall. I tried with both configuration (above and below), `input { beats { type => beats port => 5044 } }` I am using Bridge Network, I can ping the vmware ubuntu machine but same problem : `Connecting error publishing events (retrying): dial tcp 192.168.220.130:5044: connectex: No connection could be made because the target machine actively refused it.` Any clue? ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [January 18, 2016, 8:05pm UTC](https://discuss.elastic.co/t/error-filebeast-from-windows-machine-to-vmware-ubuntu-machine/39442/6 "2016-01-18T20:05:09Z")
This is either a networking or firewall problem as previously mentioned. You may want to check with your VM admin. ---
**Author:** ![carmelom](https://avatars.discourse-cdn.com/v4/letter/c/e19adc/32.png) [@carmelom](https://discuss.elastic.co/u/carmelom)\ **Post date:** [January 21, 2016, 11:32am UTC](https://discuss.elastic.co/t/error-filebeast-from-windows-machine-to-vmware-ubuntu-machine/39442/7 "2016-01-21T11:32:57Z")
Fixed. I had 2 different error: 1. In vmware I must use : Bridge Network 2. My error in the ELK configuration files. Now it is working fine. ---
**Author:** ![toasti](https://avatars.discourse-cdn.com/v4/letter/t/b2d939/32.png) [@toasti](https://discuss.elastic.co/u/toasti)\ **Post date:** [September 28, 2016, 12:43pm UTC](https://discuss.elastic.co/t/error-filebeast-from-windows-machine-to-vmware-ubuntu-machine/39442/8 "2016-09-28T12:43:46Z")
Same problem here, what was your solution in the config? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 5, 2017, 9:50pm UTC](https://discuss.elastic.co/t/error-filebeast-from-windows-machine-to-vmware-ubuntu-machine/39442/9 "2017-07-05T21:50:35Z")