Filebeat not sending to logstash

Elastic Stack Beats
1

Hello everybody. I am a total newbie. I am having problem sending logs to Logstash from Filebeat. Actually I don't see anything coming out the port 5044 with sudo tcpdump port 5044 and '(tcp-syn|tcp-ack)!=0'

Here is the content of filebeat.yml
Even though my final goal is to set up a TLS connection, at the moment I am just trying to see if I can establish a connection. If you feel like giving me a hint on the TLS part, would be greatly appreciated!

Thank you so much everybody.

Andrea

################### Filebeat Configuration Example #########################

############################# Filebeat ######################################
filebeat:
  # List of prospectors to fetch data.
  prospectors:
    # Each - is a prospector. Below are the prospector specific configurations
    -
      paths:
        - /var/log/*.log
     
      input_type: log

     
  registry_file: /var/lib/filebeat/registry

output:

  ### Logstash as output
  logstash:    
# The Logstash hosts
    hosts: ["xxx.xxx.xxx.xxx:5044"] 
logging:
  files:
2

Try running with debug logging turned on. See Filebeat Reference » Troubleshooting » Debugging

3

I am having some problems understanding the output..

4

@overip Please share the log output so we can help you understanding it.

5

This topic was automatically closed after 21 days. New replies are no longer allowed.