# Filebeat to Elastic (7.4): connection refused

**URL:** https://discuss.elastic.co/t/filebeat-to-elastic-7-4-connection-refused/203604
**Category:** Elasticsearch
**Created:** [October 15, 2019, 9:16am UTC](https://discuss.elastic.co/t/filebeat-to-elastic-7-4-connection-refused/203604 "2019-10-15T09:16:54Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![hermlam](https://avatars.discourse-cdn.com/v4/letter/h/8797f3/32.png) [@hermlam](https://discuss.elastic.co/u/hermlam)
#### Post date: [October 15, 2019, 9:16am UTC](https://discuss.elastic.co/t/filebeat-to-elastic-7-4-connection-refused/203604/1 "2019-10-15T09:16:55Z")

</div>

Hi,  
I installed Elastic, Kibana and Heartbeat as instructed. All 7.4, Ubuntu 18.04 and all working fine.  
With Filebeat, on another Ubuntu I installed Filebeat and this is can't connect to Elastic: "Connection refused". There are many posts on the internet, any old. I tried network.host: 0.0.0.0, but then Elastic won't (re)start.  
It's all internal network.

Thanks for help!  
Herman

---

<div class="post-metadata">

### Author: ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [October 15, 2019, 10:05am UTC](https://discuss.elastic.co/t/filebeat-to-elastic-7-4-connection-refused/203604/2 "2019-10-15T10:05:03Z")

</div>

Welcome!

> [@hermlam](#):
>
> I tried network.host: 0.0.0.0, but then Elastic won't (re)start.

That's the way to go.  
Hopefully, when elasticsearch does not start it gives you some logs.  
A wild guess is that you are hitting a bootstrap check issue. In which case please read [Bootstrap Checks | Elasticsearch Guide [8.11] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/bootstrap-checks.html)

---

<div class="post-metadata">

### Author: ![hermlam](https://avatars.discourse-cdn.com/v4/letter/h/8797f3/32.png) [@hermlam](https://discuss.elastic.co/u/hermlam)
#### Post date: [October 15, 2019, 10:51am UTC](https://discuss.elastic.co/t/filebeat-to-elastic-7-4-connection-refused/203604/3 "2019-10-15T10:51:40Z")

</div>

Hi David,

Thanks for your quick answer! With that option elastic is starting.  
Some steps further now. An error ocucuring in the next steps I will investigate first like with: filebeat setup -e, error in Kibana. Will try first myself.  
Thanks a lot!

Herman

---

<div class="post-metadata">

### Author: ![hermlam](https://avatars.discourse-cdn.com/v4/letter/h/8797f3/32.png) [@hermlam](https://discuss.elastic.co/u/hermlam)
#### Post date: [October 15, 2019, 12:31pm UTC](https://discuss.elastic.co/t/filebeat-to-elastic-7-4-connection-refused/203604/4 "2019-10-15T12:31:17Z")

</div>

Hi David,  
Filebeat is running now and a lot of syslog events (from my syslog server) are coming in. Compared to splunk, the same amount so that's running fine. Thanks!  
Something is still wrong with 'filebeat set -e'. I think somewhere in the install scripts/config files there are some http:/localhost:9200 left

Herman

---

<div class="post-metadata">

### Author: ![hermlam](https://avatars.discourse-cdn.com/v4/letter/h/8797f3/32.png) [@hermlam](https://discuss.elastic.co/u/hermlam)
#### Post date: [October 15, 2019, 12:32pm UTC](https://discuss.elastic.co/t/filebeat-to-elastic-7-4-connection-refused/203604/5 "2019-10-15T12:32:26Z")

</div>

sorry, localhost:5601, so Kibana

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 12, 2019, 12:42pm UTC](https://discuss.elastic.co/t/filebeat-to-elastic-7-4-connection-refused/203604/6 "2019-11-12T12:42:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
