@oleksiy-elastic I had to configure it to 9200 and moved elastic to 9201 as we only have 9200 open to our AWS VMs and it takes a long time to get that changed.
That issue has resolved itself after a few restarts (or maybe when I changed the user for the filebeat log??) and got replaced by
NoMethodError: undefined method `join' for nil:NilClass
Which I have found some posts for already and it turned out that when AppSearch started up, it killed ElasticSearch - and pretty much the whole VM.
I restarted the VM and it's actually up and running now, but I suspect failures will start again when the log rotates as the owner will be root again instead of the enterprise-search user.
Any suggestions on how to resolve that?