Logstash connecting to ES instance on localhost instead of physical IP

Elastic Stack Logstash
1

I have installed ELK stack 7.6 on a single server. This is on a trial run

I set up ElasticSearch, Logstash, and Kibana to run on physical IP instead of locahost.

I am able to reach all three components with the IP address on respective ports from browser and curl

ES -->Curl "http://x.x.x.x/:9200"
Logstash --> curl "http://x.x.x.x:9600"
Kibana --> curl "http://x.x.x.x:5601"

However, Logstash by default is trying to reach elasticsearch instance on localhost:9200 instead of IP address ("http://x.x.x.x/:9200").

Where should i change in logstash so that it looks to check on the physical IP("http://x.x.x.x/:9200") for ES instance instead of localhost:9200

2

What does your Logstash config look like?

3

Strange. Connecting to IP address after server reboot with following message in logstash logs.

[INFO ][logstash.outputs.elasticsearch][main] Elasticsearch pool URLs updated {:changes=>{:removed=>, :added=>[http://x.x.x.x:9200/]}}
[2020-04-22T07:22:57,697][WARN ][logstash.outputs.elasticsearch][main] Restored connection to ES instance {:url=>"http://x.x.x.x:9200/"}

Any reason as to why it could not recognize the change before reboot