# Filebeat not connecting to logstach (getting started config)

**URL:** <https://discuss.elastic.co/t/filebeat-not-connecting-to-logstach-getting-started-config/85015>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [May 9, 2017, 6:06am UTC](https://discuss.elastic.co/t/filebeat-not-connecting-to-logstach-getting-started-config/85015 "2017-05-09T06:06:39Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![mninoruiz](https://avatars.discourse-cdn.com/v4/letter/m/2bfe46/32.png) [@mninoruiz](https://discuss.elastic.co/u/mninoruiz)\
**Post date:** [May 12, 2017, 3:54am UTC](https://discuss.elastic.co/t/filebeat-not-connecting-to-logstach-getting-started-config/85015/7 "2017-05-12T03:54:03Z")

</div>

HI @steffens,

Thanks so much for your help, now it's working.  
root cause: The interface between the chair and the screen 😳!  
Explanation: I went on and downloaded the latest version (5.4.0) and it worked immediately... curious to know why I diff the config files with the previous version, and ooops, filebeat.yml 5043 port config was pointing to elasticsearch (port 5043)!  
I did put it as the guide (and as posted here) but since in 5.3.0 permissions were wrong for filebeat user  
(issue [Filebeat.yml must be owned by the beat user (uid=0) or root](https://discuss.elastic.co/t/filebeat-yml-must-be-owned-by-the-beat-user-uid-0-or-root/82899))  
when I fixed it I had the file already opened in another sublimeText window, so It got overwritten silently later and I guess I missed somehow the sublime notification of this refresh...  
Now in 5.4.0 permissions are ok out of the tar.gz , and I have the latest version, yay!  
apologies for the time wasted, thanks a lot for your support!

---

_[View the full topic](https://discuss.elastic.co/t/filebeat-not-connecting-to-logstach-getting-started-config/85015)._
