# Filebeat on windows to ES instance on Ubuntu **URL:** \ **Category:** Logstash\ **Created:** [March 20, 2018, 2:44pm UTC](https://discuss.elastic.co/t/filebeat-on-windows-to-es-instance-on-ubuntu/124793 "2018-03-20T14:44:12Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![kanchan\_pingale](https://avatars.discourse-cdn.com/v4/letter/k/82dd89/32.png) [@kanchan\_pingale](https://discuss.elastic.co/u/kanchan_pingale)\ **Post date:** [March 20, 2018, 2:44pm UTC](https://discuss.elastic.co/t/filebeat-on-windows-to-es-instance-on-ubuntu/124793/1 "2018-03-20T14:44:12Z")
I am trying to connect Filebeat on windows to ES instance on Ubuntu via Logstash. The error which I got is : ![logstash](https://us1.discourse-cdn.com/elastic/original/3X/f/4/f486179356f8e28cd36007564ce05bb2cbf3f3c8.png) Its not getting connected ! ANd even logstash is getting terminated! ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [March 20, 2018, 6:24pm UTC](https://discuss.elastic.co/t/filebeat-on-windows-to-es-instance-on-ubuntu/124793/2 "2018-03-20T18:24:57Z")
Are you posting using multiple accounts or what's going on? > [@Filebeat on windows to ES instance on Ubuntu](https://discuss.elastic.co/t/filebeat-on-windows-to-es-instance-on-ubuntu/124793): > > I am trying to connect Filebeat on windows to ES instance on Ubuntu via Logstash. The error which I got is : [logstash] Its not getting connected ! ANd even logstash is getting terminated! ---
**Author:** ![xmatt](https://avatars.discourse-cdn.com/v4/letter/x/5daacb/32.png) [@xmatt](https://discuss.elastic.co/u/xmatt)\ **Post date:** [March 20, 2018, 7:47pm UTC](https://discuss.elastic.co/t/filebeat-on-windows-to-es-instance-on-ubuntu/124793/3 "2018-03-20T19:47:19Z")
Correct me if I'm wrong, but that long snip you've pasted is from the Ubuntu box right? Is that your Logstash log? It looks like your ES service isn't running, or accepting connections on that IP:port combination 192.168.43.21:9200. That may explain why Logstash terminates, because i can't hold all the data being sent to it by filebeat without sending it into ES? Just a thought. Best of luck! ---
**Author:** ![kanchan\_pingale](https://avatars.discourse-cdn.com/v4/letter/k/82dd89/32.png) [@kanchan\_pingale](https://discuss.elastic.co/u/kanchan_pingale)\ **Post date:** [March 21, 2018, 7:24am UTC](https://discuss.elastic.co/t/filebeat-on-windows-to-es-instance-on-ubuntu/124793/4 "2018-03-21T07:24:10Z")
Yes exactly! Filebeat is able to send logs to local elasticsearch but not to remote. My filebeat and logstash are on windows machine and my elasticsearch is on ubuntu ---
**Author:** ![xmatt](https://avatars.discourse-cdn.com/v4/letter/x/5daacb/32.png) [@xmatt](https://discuss.elastic.co/u/xmatt)\ **Post date:** [March 21, 2018, 8:35pm UTC](https://discuss.elastic.co/t/filebeat-on-windows-to-es-instance-on-ubuntu/124793/5 "2018-03-21T20:35:41Z")
Have you checked your local FW on your Ubuntu machine? Have you run tcpdump to see if the Ubuntu machine is getting the packets from your Windows machine? This could very well be a simple networking issue - that would be nice and easy for you to fix 🙂 Best of luck! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [April 18, 2018, 8:36pm UTC](https://discuss.elastic.co/t/filebeat-on-windows-to-es-instance-on-ubuntu/124793/6 "2018-04-18T20:36:03Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.