FileBeat How to control the ports used

[gaogao110]

During use, the program will randomly start the port, is there any way to control ?

[legoguy1000 (Alex)]

Randomly start what port? Are u using one of the inputs that listens on a port; udp, tcp, netflow...?

[gaogao110]

ex

For example:
output to ES fliebeat will launch a random port

[leandrojmp (Leandro Pereira)]

This is the client port that filebeat is using to connect to Elasticsearch, you do not control that.

[gaogao110]

Thank you reply

  I think it is necessary in the scenario of strict port management, 
  Because the server can only open a fixed single port.

  Is there any solution to this problem?

[leandrojmp (Leandro Pereira)]

I'm sorry, but I do not see any issue or problem.

Your server is not listening on that 54998 port, this port was created by the filebeat process to communicate with your Elasticsearch, it is a client port for the TCP connection, it can be any port in the available port ranges, which is normally from 1024 to 65535.

There is no option in filebeat to limit this client port, if you can only use a specific range, than you will need to change this in the operating system level, which is out of the scope of this forum and should be done with caution as this can impact your system.