Issue connecting to Elastic from Metricbeat

Elastic Stack Beats
1

I am getting following error , when i tried to connect to elastic (which is in another server) from metricbeat server. What could be the issue ? Can you guys help on it . Thanks in Advance

PS C:\ELK_PROD\Metricbeat> .\metricbeat test output
elasticsearch: https://AOSMonitor.degag.corpintra.net:9200...
parse url... OK
connection...
parse host... OK
dns lookup... OK
addresses: 53.36.18.220
dial up... OK
TLS...
security: server's certificate chain verification is enabled
handshake... OK
TLS version: TLSv1.3
dial up... OK
talk to server... ERROR Get "https://AOSMonitor.degag.corpintra.net:9200": Forbidden

2

Hmmm. Guessing from the output, it looks like the basics (name resolution of AOSMonitor using DNS) is working, which makes me suspect a firewall or proxy server somewhere not allowing you through. You could use your local web browser to try to connect to the Elasticsearch server with HTTPS, but make sure to try it with and without a proxy configuration in the browser, but I really prefer a command line tool for that kind of testing. Do PowerShell come with something that will talk HTTPS? Some type of GetUsingUrl command? If not, install some MinGW tools like curl and wget and thank me later. Cygwin will also do, but might be overkill.

3

Thanks for the reply..
I tried from local browser with and without proxy , i could able to open the elasticsearch server .. Still not sure why the test output is giving Forbidden

On to it , Ping is working to the AOSMonitor.degag.corpintra.net from metricbeat server

Telnet is working [AOSMonitor.degag.corpintra.net:9200] from metricbeat server .

tracert is getting resolved within 2 hops.

What other reason it could be for the reason for forbidden

4

From Browser i could able to connect to Elasticsearch with or without proxy , not sure why i am not able to connect from metric beat .. Test output is giving forbidden error..