I can't seem to connect to logstash for some reason?

Elastic Stack Logstash
1

Dec 20 17:46:32 ELK-Server logstash[690]: [2025-12-20T17:46:32,609][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"khttp://localhost:9200/", :exception=>LogStash::Outputs::Elasticsearch::HttpClient::Pool::HostUnreachableError, :message=>"Elasticsearch Unreachable: [khttp://localhost:9200/\][Manticore::ClientProtocolException] localhost:9200 failed to respond"}

This is the error I am getting. Not sure what I did wrong. I added “k” in front of the links cause it wouldn’t let me post it.

And here is my beats.conf

input {
  beats {
    port => 5044
  }
}

output {
  elasticsearch {
    hosts => ["https://localhost:9200"]
    user => "elastic"
    password => "***************"
    cacert => "/etc/elasticsearch/certs/http_ca.crt"
    index => "nmap-logs-%{+YYYY.MM.dd}"
  }
}
2

Hello @Miksos

Welcome to the Community!!

Could you please check if the elasticsearch is reachable on the URL “https://localhost:9200” , you can try to do a test from logstash host :

curl -u elastic:<password> \
  --cacert /etc/elasticsearch/certs/http_ca.crt \
  https://localhost:9200

Thanks!!

3

The 'k' a side

Your config uses https but the error says http which could indicate you are not using the config you think you are...

1 Like
4

Or he had corrected beats.conf but not restarted LS or not using config.reload.automatic: true

5

Yes, I made a second config, and made a slight mistake there, I made an fix and it works as before, Thank you for the help !

1 Like
6

Thank you every one for the help !

2 Likes