# Filebeat, challenge for the host to reach elasticsearh server using IP :9200

**URL:** <https://discuss.elastic.co/t/filebeat-challenge-for-the-host-to-reach-elasticsearh-server-using-ip-9200/205611>\
**Category:** Elasticsearch\
**Created:** [October 29, 2019, 8:08am UTC](https://discuss.elastic.co/t/filebeat-challenge-for-the-host-to-reach-elasticsearh-server-using-ip-9200/205611 "2019-10-29T08:08:38Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Joseph\_John](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joseph_john/32/53907_2.png) [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\
**Post date:** [October 29, 2019, 8:08am UTC](https://discuss.elastic.co/t/filebeat-challenge-for-the-host-to-reach-elasticsearh-server-using-ip-9200/205611/1 "2019-10-29T08:08:38Z")

</div>

Hi All,  
I have installed elasticsearch, kibana  
Later I tried filebeat installed on the same machine, in the SIEM I was getting the details of this host as host information. The communication between the filebeat service and elastisearch and kibana worked fine since it was in the same machine.

Now I need to get other hosts details, I have to install filebeat to other systems, after installing the “filebeat” service in other machine, my challenge is that how they will be communicate with the elasticsearch.

For Kibana service I was able to bind the loopback IP to port 5601, so any machine in my network can talk to kibana  
But for Elastisearch,

> If I change the “network.host” to the Server IP, it will shift from development mode to production mode, checks the pre requistive for the production enviornment and get fails, So my hosts cannot communicate to the elastisearch server IP with port 9200

Since host cannot communicate with the elasticservice using IP:9200. I was wondering if thehosts filbeat can push data to the kibana service and then kibana pass it to the elasticsearch server (kibana and elastisearch are on the same machine)

Also like to request advice on how can I stay in development mode, even after changing the “network.host” to server IP in “ `/etc/elasticsearch/elasticsearch.yml”`  
Thanks  
Joseph John

**Kibana version** :  
7.4.1   
**Elasticsearch version** :  
7.4.1  
**APM Server version** :  
7.4.1  
\*\*filebeat version \*\*  
7.4.1  
**APM Agent language and version** :  
NA

---

<div class="post-metadata">

**Author:** ![MiTschMR](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mitschmr/32/48254_2.png) [@MiTschMR](https://discuss.elastic.co/u/MiTschMR)\
**Post date:** [October 29, 2019, 11:01am UTC](https://discuss.elastic.co/t/filebeat-challenge-for-the-host-to-reach-elasticsearh-server-using-ip-9200/205611/3 "2019-10-29T11:01:59Z")

</div>

Hi @Joseph_John

In order to push data to Elasticsearch without using Elasticsearch you would have to use Logstash and configure it accordingly. Following some links that may help you (if you have not already seen them):

- [Important Elasticsearch configuration](https://www.elastic.co/guide/en/elasticsearch/reference/7.4/important-settings.html)
- [Important System Configuration](https://www.elastic.co/guide/en/elasticsearch/reference/7.4/system-config.html)
- [Bootstrap checks](https://www.elastic.co/guide/en/elasticsearch/reference/7.4/bootstrap-checks.html)
- [Discovery and cluster formation settings](https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-discovery-settings.html)

These links contain information about the development and production mode, the necessary checks that Elasticsearch does, configurable settings and more. You should be able to set the necessary setting(s), `discovery.type: single-node`, with these documentations.

Hope this helps.

---

<div class="post-metadata">

**Author:** ![Joseph\_John](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joseph_john/32/53907_2.png) [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\
**Post date:** [October 29, 2019, 11:31am UTC](https://discuss.elastic.co/t/filebeat-challenge-for-the-host-to-reach-elasticsearh-server-using-ip-9200/205611/4 "2019-10-29T11:31:24Z")

</div>

Thanks  
I will refer the docs and check it  
will update the progress  
thanks  
Joseph John

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 26, 2019, 11:31am UTC](https://discuss.elastic.co/t/filebeat-challenge-for-the-host-to-reach-elasticsearh-server-using-ip-9200/205611/5 "2019-11-26T11:31:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
