Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to http://X.X.X.X:5601/api/status fails: fail to execute the HTTP GET request: Get "http://X.X.X.X:5601/api/status": context deadline exceeded. Response:

There's two separate items here.

First is if you want to set up dashboards and you should set up the rest of the assets you need connectivity between filebeat and both elasticsearch and Kibana. It seems like you're having problems with that.

Second, in order to take full advantage of file beat, you need to run the full filebeat setup while Filebeat is pointing at Kibana and Elasticsearch.
filebeat setup -e

Then after you finished successfully setting up filebeat, you can then point filebeat at logstash... To actually run filebeat through logstash. I've written about this a number of times.

Generally, I tell people to first have file beat directly ingest into elasticsearch And then only after they have all that working then involve logstash.

These are just my suggestions.

In the end, none of this matters if you don't have the connectivity issue solved.

It's late here. I'll check in tomorrow

Looks like we finally documented this