# Filebeat logstash output other than 5044 is not working

**URL:** https://discuss.elastic.co/t/filebeat-logstash-output-other-than-5044-is-not-working/189534
**Category:** Beats
**Created:** [July 9, 2019, 11:37am UTC](https://discuss.elastic.co/t/filebeat-logstash-output-other-than-5044-is-not-working/189534 "2019-07-09T11:37:44Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![gorkii](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gorkii/32/49660_2.png) [@gorkii](https://discuss.elastic.co/u/gorkii)
#### Post date: [July 9, 2019, 11:37am UTC](https://discuss.elastic.co/t/filebeat-logstash-output-other-than-5044-is-not-working/189534/1 "2019-07-09T11:37:45Z")

</div>

Hello,

I have a problem that if filebeat output is configured to use any ports except 5044 is not working. Filebeat does not send ACK after receiving SYN, ACK from the logstash. When I change the port to 5044, it is working fine. Can anyone help me? My configuration is below.

#=========================== Filebeat inputs =============================  
filebeat.inputs:

- enabled: true  
paths:  
- /apps/debug/aplog/debug.txt  
include\_lines: ['CurrentAlarm']  
fields\_under\_root: true  
fields:  
monitortype: almcnt  
systype: mec  
sysgroup: mec

- enabled: false  
paths:  
- /apps/debug/oslog/messages  
fields\_under\_root: true  
fields:  
monitortype: oslog  
systype: mec  
sysgroup: mec

#----------------------------- Logstash output --------------------------------  
output.logstash:  
hosts: ["172.20.2.92:5055"]

Thank you in advance.

---

<div class="post-metadata">

### Author: ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)
#### Post date: [July 10, 2019, 1:19pm UTC](https://discuss.elastic.co/t/filebeat-logstash-output-other-than-5044-is-not-working/189534/2 "2019-07-10T13:19:54Z")

</div>

You need to use a port Logstash is bound to. Logstash acts as server and Beats connect to it. If you want to use another port, then you need to configure logstash (and firewals?) to open said port.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 7, 2019, 3:19pm UTC](https://discuss.elastic.co/t/filebeat-logstash-output-other-than-5044-is-not-working/189534/3 "2019-08-07T15:19:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.