# Filebeat not able to establish connection with my elk host machine
**URL:** https://discuss.elastic.co/t/filebeat-not-able-to-establish-connection-with-my-elk-host-machine/39956
**Category:** Beats
**Tags:** filebeat
**Created:** [January 23, 2016, 8:18pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-establish-connection-with-my-elk-host-machine/39956 "2016-01-23T20:18:07Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@Akash\_Katakam](https://discuss.elastic.co/u/Akash_Katakam)
#### Post date: [January 23, 2016, 8:18pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-establish-connection-with-my-elk-host-machine/39956/1 "2016-01-23T20:18:07Z")
I installed filebeat on my dev server and wanted to fetch log files from there to another machine but when i try to run logstash.bat -f config.json on my elk machine it shows error in my console
←[31mAttempted to send a bulk request to Elasticsearch configured at '["[http://http](http://http)://localhost:9200/"]', but an error occurred and it failed! Are you sure you can reach elasticsea
rch from this machine using the configuration provided? {:client\_config=\>{:hosts=\>["[http://http](http://http)://localhost:9200/"], :ssl=\>nil, :transport\_options=\>{:socket\_timeout=\>0, :request\_ti
meout=\>0, :proxy=\>nil, :ssl=\>{}}, :transport\_class=\>Elasticsearch::Transport::Transport::HTTP::Manticore, :logger=\>nil, :tracer=\>nil, :reload\_connections=\>false, :retry\_on\_failure=
> false, :reload\_on\_failure=\>false, :randomize\_hosts=\>false}, :error\_message=\>"http", :error\_class=\>"Manticore::ResolutionFailure", :backtrace=\>["F:/wo/logstash-2.1.1/vendor/bundle/
> jruby/1.9/gems/manticore-0.4.4-java/lib/manticore/response.rb:35:in `initialize'", "org/jruby/RubyProc.java:281:in `call'", "F:/wo/logstash-2.1.1/vendor/bundle/jruby/1.9/gems/manti
> core-0.4.4-java/lib/manticore/response.rb:70:in `call'", "F:/wo/logstash-2.1.1/vendor/bundle/jruby/1.9/gems/manticore-0.4.4-java/lib/manticore/response.rb:245:in `call\_once'", "F:/
> wo/logstash-2.1.1/vendor/bundle/jruby/1.9/gems/manticore-0.4.4-java/lib/manticore/response.rb:148:in `code'", "F:/wo/logstash-2.1.1/vendor/bundle/jruby/1.9/gems/elasticsearch-trans port-1.0.15/lib/elasticsearch/transport/transport/http/manticore.rb:71:in `perform\_request'", "org/jruby/RubyProc.java:281:in `call'", "F:/wo/logstash-2.1.1/vendor/bundle/jruby/1.9 /gems/elasticsearch-transport-1.0.15/lib/elasticsearch/transport/transport/base.rb:201:in `perform\_request'", "F:/wo/logstash-2.1.1/vendor/bundle/jruby/1.9/gems/elasticsearch-trans
> port-1.0.15/lib/elasticsearch/transport/transport/http/manticore.rb:54:in `perform_request'", "F:/wo/logstash-2.1.1/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.15/lib/ elasticsearch/transport/client.rb:125:in `perform\_request'", "F:/wo/logstash-2.1.1/vendor/bundle/jruby/1.9/gems/elasticsearch-api-1.0.15/lib/elasticsearch/api/actions/bulk.rb:87:in
can someone tell me what exactly is the problem?
Filbeat version 1.0.1 installed on ubuntu server
ELK on windows
ES 2.1.1
logstash 2.1.1
i used the config.json as per the documentation
\*\* logstash:\*\*
\*\* # The Logstash hosts\*\*
\*\* hosts: ["183.83.221.80:5044"]\*\*
\*\* # Number of workers per Logstash host.\*\*
\*\* #worker: 1\*\*
\*\* # Optional load balance the events between the Logstash hosts\*\*
\*\* #loadbalance: true\*\*
my filebeat config
---
### Author:  [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [January 23, 2016, 8:28pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-establish-connection-with-my-elk-host-machine/39956/2 "2016-01-23T20:28:36Z")
> [@Akash\_Katakam](#):
>
> "[http://http](http://http)://localhost:9200/"
Looks like you have configured the Elasticsearch output plugin in Logstash incorrectly. Can you show your Logstash config?
---
### Author:  [@Akash\_Katakam](https://discuss.elastic.co/u/Akash_Katakam)
#### Post date: [January 23, 2016, 8:29pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-establish-connection-with-my-elk-host-machine/39956/3 "2016-01-23T20:29:21Z")
codec =\> json
port =\> 5044
}
}
output {
elasticsearch {
hosts =\> ["[http://localhost:9200](http://localhost:9200)"]
index =\> "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document\_type =\> "%{[@metadata][type]}"
}
}
---
### Author:  [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [January 23, 2016, 8:34pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-establish-connection-with-my-elk-host-machine/39956/4 "2016-01-23T20:34:00Z")
> [@Akash\_Katakam](#):
>
> hosts =\> ["[http://localhost:9200](http://localhost:9200)"]
The hosts parameter should not include 'http://'. See [the documentation](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-hosts) for an example.
---
### Author:  [@Akash\_Katakam](https://discuss.elastic.co/u/Akash_Katakam)
#### Post date: [January 23, 2016, 8:37pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-establish-connection-with-my-elk-host-machine/39956/5 "2016-01-23T20:37:31Z")
yeah man thanks! but now it is showing logstash start up completed.but logs are not being pushed to elastic search
---
### Author:  [@Akash\_Katakam](https://discuss.elastic.co/u/Akash_Katakam)
#### Post date: [January 23, 2016, 8:44pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-establish-connection-with-my-elk-host-machine/39956/6 "2016-01-23T20:44:41Z")
i tried giving file as an output it worked perfect.but when logstash as output we are getting this [problem.Is](http://problem.Is) there any chance that connection is not established between filebeat and logstash
---
### Author:  [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [January 23, 2016, 8:58pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-establish-connection-with-my-elk-host-machine/39956/7 "2016-01-23T20:58:25Z")
Please do not post screenshots of terminal windows when you can copy the relevant text instead. What does your input config look like in Logstash?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 9:56pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-establish-connection-with-my-elk-host-machine/39956/8 "2017-07-05T21:56:26Z")