[ERROR] Winlogbeat cannot connect to Elastic

Elastic Security
1

Hello friends,

I am trying connect Winlogbeat from my Windows PC to Elastic in Ubuntu Server.

Unfortunately i received that message error:

elastic01
elastic011586×564 45.4 KB

I try allow port 9200 in Windows and Ubuntu VM, but error continue
I try disable firewall in Windows and Ubuntu VM, but error continue

I need your help!

Thanks so much!

2

Hi @marioaxavier7 Welcome to the community!

First please try not to post images of text the can be hard to read, can not be searched can not be debugged.

What version winlogbeat and elastic

It elastic is 8.x it is probably running on HTTPS

run

curl -v http://<ohseeicannotcutandpastetheip>:9200

curl -k -v https://<ohseeicannotcutandpastetheip>:9200

Although actively refused is often a Firewall

3

Also I suggest to run the above curl commands from bash on the ubuntu machine (i.e. using the given IP, not localhost) to confirm ES works.