# Filebeat to logstash using proxy\_url

**URL:** <https://discuss.elastic.co/t/filebeat-to-logstash-using-proxy-url/68159>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [December 6, 2016, 11:12am UTC](https://discuss.elastic.co/t/filebeat-to-logstash-using-proxy-url/68159 "2016-12-06T11:12:26Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![sunilmchaudhari](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sunilmchaudhari/32/9475_2.png) [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Post date:** [December 6, 2016, 11:12am UTC](https://discuss.elastic.co/t/filebeat-to-logstash-using-proxy-url/68159/1 "2016-12-06T11:12:26Z")

</div>

Hi,

Can somebody provide practical use case to use proxy\_url when connecting logstash using filbeat output.logstash plugin?

br,  
Sunil

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [December 6, 2016, 3:56pm UTC](https://discuss.elastic.co/t/filebeat-to-logstash-using-proxy-url/68159/2 "2016-12-06T15:56:43Z")

</div>

Did you already check out the docs here? [https://www.elastic.co/guide/en/beats/filebeat/5.0/logstash-output.html#\_proxy\_url\_2](https://www.elastic.co/guide/en/beats/filebeat/5.0/logstash-output.html#_proxy_url_2)

---

<div class="post-metadata">

**Author:** ![sunilmchaudhari](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sunilmchaudhari/32/9475_2.png) [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Post date:** [December 7, 2016, 1:16pm UTC](https://discuss.elastic.co/t/filebeat-to-logstash-using-proxy-url/68159/3 "2016-12-07T13:16:43Z")

</div>

Hi Ruflin,  
I am not good in networking.

We have F5 and A10 load balancers in our environments.  
Can I use proxy\_url setting using SOCKS5 protocol to send message to logstash behind this load balancer?

br,  
Sunil

---

<div class="post-metadata">

**Author:** ![sunilmchaudhari](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sunilmchaudhari/32/9475_2.png) [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Post date:** [December 7, 2016, 1:27pm UTC](https://discuss.elastic.co/t/filebeat-to-logstash-using-proxy-url/68159/4 "2016-12-07T13:27:09Z")

</div>

Hi,  
Or other way round:

What kind of configurations need to be supportd by F5 and A10 load balancers or reverse proxy, when we want to use above configuration? (proxy\_url)

I understood one thing is, it should support SOCKS5 protocol. Is that correct? anything apart from this?

br,  
Sunil

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [December 7, 2016, 2:38pm UTC](https://discuss.elastic.co/t/filebeat-to-logstash-using-proxy-url/68159/5 "2016-12-07T14:38:13Z")

</div>

If your intended architecture is FB -\> LB -\> LS then you don't need a SOCKS5 proxy. You can just point the Logstash output in Filebeat at the load balancer. But be aware that the connection to LS is persistent (see [https://github.com/elastic/beats/issues/661](https://github.com/elastic/beats/issues/661)).

```auto
                                         +-----> Logstash 0
                +-------------------+ | .
Filebeat +--> |Load Balancer (TCP)| +------> .
                +-------------------+ | .
                                         +-----> Logstash n

```

---

<div class="post-metadata">

**Author:** ![sunilmchaudhari](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sunilmchaudhari/32/9475_2.png) [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Post date:** [December 8, 2016, 4:27am UTC](https://discuss.elastic.co/t/filebeat-to-logstash-using-proxy-url/68159/6 "2016-12-08T04:27:02Z")

</div>

Hi Andrew,

Thanks for your comment.  
Just slight more information about our network.

There is a DMZ in between, client(filebeat) and the logging infrastructure (Logstash). Load balancers are in front of DMZ.  
Now please guide me, How to proceed? Whether with proxy\_url or without?

br,  
Sunil.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 5, 2017, 4:27am UTC](https://discuss.elastic.co/t/filebeat-to-logstash-using-proxy-url/68159/7 "2017-01-05T04:27:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.