# \[ERROR\] Winlogbeat cannot connect to Elastic

**URL:** <https://discuss.elastic.co/t/error-winlogbeat-cannot-connect-to-elastic/369845>\
**Category:** Elastic Security\
**Created:** [October 30, 2024, 8:50pm UTC](https://discuss.elastic.co/t/error-winlogbeat-cannot-connect-to-elastic/369845 "2024-10-30T20:50:58Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![marioaxavier7](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marioaxavier7/32/138881_2.png) [@marioaxavier7](https://discuss.elastic.co/u/marioaxavier7)\
**Post date:** [October 30, 2024, 8:50pm UTC](https://discuss.elastic.co/t/error-winlogbeat-cannot-connect-to-elastic/369845/1 "2024-10-30T20:50:58Z")

</div>

Hello friends,

I am trying connect Winlogbeat from my Windows PC to Elastic in Ubuntu Server.

Unfortunately i received that message error:

 ![elastic01](https://us1.discourse-cdn.com/elastic/original/3X/2/8/2841fff8b50877debea4a9df2b52748b8ef56611.png)

I try allow port 9200 in Windows and Ubuntu VM, but error continue  
I try disable firewall in Windows and Ubuntu VM, but error continue

I need your help!

Thanks so much!

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [October 30, 2024, 10:31pm UTC](https://discuss.elastic.co/t/error-winlogbeat-cannot-connect-to-elastic/369845/2 "2024-10-30T22:31:43Z")

</div>

Hi @marioaxavier7 Welcome to the community!

First please try not to post images of text the can be hard to read, can not be searched can not be debugged.

What version winlogbeat and elastic

It elastic is 8.x it is probably running on HTTPS

run

`curl -v http://<ohseeicannotcutandpastetheip>:9200`

`curl -k -v https://<ohseeicannotcutandpastetheip>:9200`

Although actively refused is often a Firewall

---

<div class="post-metadata">

**Author:** ![lesio](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lesio/32/89323_2.png) [@lesio](https://discuss.elastic.co/u/lesio)\
**Post date:** [November 5, 2024, 2:21pm UTC](https://discuss.elastic.co/t/error-winlogbeat-cannot-connect-to-elastic/369845/3 "2024-11-05T14:21:47Z")

</div>

Also I suggest to run the above curl commands from bash on the ubuntu machine (i.e. using the given IP, not localhost) to confirm ES works.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 3, 2024, 2:22pm UTC](https://discuss.elastic.co/t/error-winlogbeat-cannot-connect-to-elastic/369845/4 "2024-12-03T14:22:06Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.