Filebeat to Elastic (7.4): connection refused

Elastic Stack Elasticsearch
1

Hi,
I installed Elastic, Kibana and Heartbeat as instructed. All 7.4, Ubuntu 18.04 and all working fine.
With Filebeat, on another Ubuntu I installed Filebeat and this is can't connect to Elastic: "Connection refused". There are many posts on the internet, any old. I tried network.host: 0.0.0.0, but then Elastic won't (re)start.
It's all internal network.

Thanks for help!
Herman

2

Welcome!

That's the way to go.
Hopefully, when elasticsearch does not start it gives you some logs.
A wild guess is that you are hitting a bootstrap check issue. In which case please read Bootstrap Checks | Elasticsearch Guide [8.11] | Elastic

3

Hi David,

Thanks for your quick answer! With that option elastic is starting.
Some steps further now. An error ocucuring in the next steps I will investigate first like with: filebeat setup -e, error in Kibana. Will try first myself.
Thanks a lot!

Herman

4

Hi David,
Filebeat is running now and a lot of syslog events (from my syslog server) are coming in. Compared to splunk, the same amount so that's running fine. Thanks!
Something is still wrong with 'filebeat set -e'. I think somewhere in the install scripts/config files there are some http:/localhost:9200 left

Herman

5

sorry, localhost:5601, so Kibana

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.