Good Day,
This is my first post in Elastic forum. Apologise for any mistake in formatting.
I'm encountering an issue around my filebeat listener only listening in ipv6 instead of ipv4. I understand it has something to do with Java Options settings. For logstash and elasticsearch, I could find the configuration files in /etc/default/*, and set LS_JAVA_OPTS="-Djava.net.preferIPv4Stack=true
. However for filebeat, I couldn't find the filebeat config file there. Any pointers are appreciated.
Thank You
filebeat.yml
filebeat.inputs:
- type: syslog
protocol.udp:
host: "0.0.0.0:514"
tags: ["usg"]
output.logstash:
hosts: [127.0.0.1:5044]'
netstat
'Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
udp6 0 0 :::514 :::* -