# Logstash and filebeat configuration for ports
**URL:** https://discuss.elastic.co/t/logstash-and-filebeat-configuration-for-ports/145576
**Category:** Logstash
**Created:** [August 22, 2018, 2:47pm UTC](https://discuss.elastic.co/t/logstash-and-filebeat-configuration-for-ports/145576 "2018-08-22T14:47:53Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@rohitg](https://discuss.elastic.co/u/rohitg)
#### Post date: [August 22, 2018, 2:47pm UTC](https://discuss.elastic.co/t/logstash-and-filebeat-configuration-for-ports/145576/1 "2018-08-22T14:47:53Z")
I have setup one elk cluster (Elasticsearch + Logstash + Kibana) on a windows server.
And installed beats(filebeat+winlogbeat) on 3 windows servers.
Question about ports that need to be configure in beats and logstash. Below are the config files, Can you confirm ports should be configured as such or advise otherwise.
Server 1:
Filebeat config: hosts: ["12.10.20.21:5044"]
Winlogbeat config: hosts: ["12.10.20.21:5045"]
Server 2:
Filebeat config: hosts: ["12.10.20.21:5046"]
Winlogbeat config: hosts: ["12.10.20.21:5047"]
Server 3:
Filebeat config: hosts: ["12.10.20.21:5048"]
Winlogbeat config: hosts: ["12.10.20.21:5049"]
ELK Server:
Logstash config:
input {
beats {
port =\> 5044
}
beats {
port =\> 5045
}
beats {
port =\> 5046
}
beats {
port =\> 5047
}
beats {
port =\> 5048
}
beats {
port =\> 5049
}
}
output {
elasticsearch {
manage\_template =\> false
hosts =\> "12.10.20.21:9200"
index =\> "logstash-app-prod"
}
}
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [August 22, 2018, 3:02pm UTC](https://discuss.elastic.co/t/logstash-and-filebeat-configuration-for-ports/145576/2 "2018-08-22T15:02:25Z")
What you have works, but it's not clear why you use different ports. All hosts can connect to the same port on the Logstash side.
---
### Author:  [@rohitg](https://discuss.elastic.co/u/rohitg)
#### Post date: [August 22, 2018, 3:58pm UTC](https://discuss.elastic.co/t/logstash-and-filebeat-configuration-for-ports/145576/3 "2018-08-22T15:58:16Z")
So you means below configuration will works better than old one that i do have now. please advise and thanks in advance.
Server 1:
Filebeat config: hosts: ["12.10.20.21:5044"]
Winlogbeat config: hosts: ["12.10.20.21:5045"]
Server 2:
Filebeat config: hosts: ["12.10.20.21:5044"]
Winlogbeat config: hosts: ["12.10.20.21:5045"]
Server 3:
Filebeat config: hosts: ["12.10.20.21:5044"]
Winlogbeat config: hosts: ["12.10.20.21:5045"]
ELK Server:
Logstash config:
input {
beats {
port =\> 5044
}
beats {
port =\> 5045
}
}
output {
elasticsearch {
manage\_template =\> false
hosts =\> "12.10.20.21:9200"
index =\> "logstash-app-prod"
}
}
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [August 23, 2018, 6:05am UTC](https://discuss.elastic.co/t/logstash-and-filebeat-configuration-for-ports/145576/4 "2018-08-23T06:05:32Z")
It won't work better or worse than the old configuration, but it's arguably easier to set up.
Why do you want to use different ports for Winlogbeat and Filebeat? That's also unnecessary.
---
### Author:  [@rohitg](https://discuss.elastic.co/u/rohitg)
#### Post date: [August 23, 2018, 7:07pm UTC](https://discuss.elastic.co/t/logstash-and-filebeat-configuration-for-ports/145576/5 "2018-08-23T19:07:59Z")
Ok. Thanks.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 20, 2018, 7:08pm UTC](https://discuss.elastic.co/t/logstash-and-filebeat-configuration-for-ports/145576/6 "2018-09-20T19:08:04Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.