I trying to start ELK stack on docker for collecting netflow data from Cisco routers and use for it blacktop/elastic, blacktop/kibana.
For logstash I modified blacktop's logstash with netflow codec plugin
Dockerfile:
FROM blacktop/logstash:latest
RUN logstash-plugin install --no-verify --version 3.2.2 logstash-codec-netflow
CMD ["-e", ""]
There is result of successfull connection test to elasticserch:
user@vkc-docker:~$ curl localhost:9200
{
"name" : "EC-xBeF",
"cluster_name" : "elasticsearch",
"cluster_uuid" : "fcgWcaimTmSDDCcX-EAghw",
"version" : {
"number" : "5.1.2",
"build_hash" : "c8c4c16",
"build_date" : "2017-01-11T20:18:39.146Z",
"build_snapshot" : false,
"lucene_version" : "6.3.0"
},
"tagline" : "You Know, for Search"
}
But when I start logstash it says that connection to elasticsearch is refused.
Output I've posted here:
http://pastebin.com/DmASVJvD
Can everybody help me?