# Logstash error during setup **URL:** \ **Category:** Logstash\ **Created:** [January 5, 2018, 6:09pm UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323 "2018-01-05T18:09:28Z")\ **Posts on this page:** 19\ **Page:** 1
**Author:** ![alpha\_gamma](https://avatars.discourse-cdn.com/v4/letter/a/59ef9b/32.png) [@alpha\_gamma](https://discuss.elastic.co/u/alpha_gamma)\ **Post date:** [January 5, 2018, 6:09pm UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/1 "2018-01-05T18:09:28Z")
Hi The team, I am getting error and tried many ways but dont know how to resolve below error. In one of the previous blogs I found the logstash and elasticsearch should be on different VM, what if I want all on one one ubuntu machine.please help asap. Failed to connect: Get [http://localhost:5044](http://localhost:5044): dial tcp 127.0.0.1:5044: getsockopt: connection refused ---
**Author:** ![murlin99](https://avatars.discourse-cdn.com/v4/letter/m/5f8ce5/32.png) [@murlin99](https://discuss.elastic.co/u/murlin99)\ **Post date:** [January 5, 2018, 6:31pm UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/2 "2018-01-05T18:31:21Z")
Can you scrub and post the network.host: section of your elasticsearch.yaml config? If this has been modified it may not be setup to answer on localhost. Bryan Vest ---
**Author:** ![alpha\_gamma](https://avatars.discourse-cdn.com/v4/letter/a/59ef9b/32.png) [@alpha\_gamma](https://discuss.elastic.co/u/alpha_gamma)\ **Post date:** [January 5, 2018, 6:36pm UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/3 "2018-01-05T18:36:36Z")
> [@alpha\_gamma](#): > > [http://localhost:5044](http://localhost:5044): dial tcp 127.0.0.1:5044: getsockopt: connection refused Hi Bryan ,you mean to say network.host:localhost should be in elasticsearch.yaml file.?or the same ip address whatever we give there ---
**Author:** ![murlin99](https://avatars.discourse-cdn.com/v4/letter/m/5f8ce5/32.png) [@murlin99](https://discuss.elastic.co/u/murlin99)\ **Post date:** [January 5, 2018, 6:41pm UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/4 "2018-01-05T18:41:54Z")
Whatever you have at network.host is where you have to connect. If you have network.host: 10.10.10.10 then you would have to [http://10.10.10.10:5044](http://10.10.10.10:5044) It does default to localhost if this option has not been modified. ---
**Author:** ![alpha\_gamma](https://avatars.discourse-cdn.com/v4/letter/a/59ef9b/32.png) [@alpha\_gamma](https://discuss.elastic.co/u/alpha_gamma)\ **Post date:** [January 5, 2018, 6:43pm UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/5 "2018-01-05T18:43:22Z")
Thanks a lot but even doing this its not working some more setting I need to alter or check please comment ---
**Author:** ![murlin99](https://avatars.discourse-cdn.com/v4/letter/m/5f8ce5/32.png) [@murlin99](https://discuss.elastic.co/u/murlin99)\ **Post date:** [January 5, 2018, 6:48pm UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/6 "2018-01-05T18:48:08Z")
Multiple things could cause this. Since that did not seem to work the next step is to look at the elasticsearch.yml config file. You can DM it to me if you prefer but I can not go any further without taking a look at the config. ---
**Author:** ![alpha\_gamma](https://avatars.discourse-cdn.com/v4/letter/a/59ef9b/32.png) [@alpha\_gamma](https://discuss.elastic.co/u/alpha_gamma)\ **Post date:** [January 5, 2018, 6:56pm UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/7 "2018-01-05T18:56:39Z")
> [@murlin99](#): > > DM please mention your email id ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [January 5, 2018, 9:20pm UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/8 "2018-01-05T21:20:01Z")
Where, exactly, are you getting this error? Which configuration file contains "5044"? ---
**Author:** ![alpha\_gamma](https://avatars.discourse-cdn.com/v4/letter/a/59ef9b/32.png) [@alpha\_gamma](https://discuss.elastic.co/u/alpha_gamma)\ **Post date:** [January 6, 2018, 5:19am UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/9 "2018-01-06T05:19:30Z")
Hi Magnusbaeck ,thanks for joining [conversation.It](http://conversation.It) comes in /valor/log/filebeat where filebeat.1 filebeat.2 such files are generated .in those files it shows error 5044: getsockopt: connection refused # If anything need to do for open this port on ubuntu ,any commands required I have defined this port in /etc/Logsatsh/conf.d/beats-input.conf # input { beats { port =\> 5400 type =\> "logs" ssl =\> true ssl\_certificate =\> "/etc/pki/tls/certs/filebeat.crt" ssl\_key =\> "/etc/pki/tls/private/filebeat.key" } } what else required what exactly i am missing.I would be grateful for resolving this issue ---
**Author:** ![alpha\_gamma](https://avatars.discourse-cdn.com/v4/letter/a/59ef9b/32.png) [@alpha\_gamma](https://discuss.elastic.co/u/alpha_gamma)\ **Post date:** [January 6, 2018, 5:30am UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/10 "2018-01-06T05:30:36Z")
Hi Bryan please ping email id again,earlier I was able to see not now ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [January 6, 2018, 9:59am UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/11 "2018-01-06T09:59:05Z")
Your Logstash configuration says 5400 and the Filebeat configuration appears to say 5044. ---
**Author:** ![alpha\_gamma](https://avatars.discourse-cdn.com/v4/letter/a/59ef9b/32.png) [@alpha\_gamma](https://discuss.elastic.co/u/alpha_gamma)\ **Post date:** [January 6, 2018, 5:14pm UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/12 "2018-01-06T17:14:35Z")
Oh sorry it may be my editing both are 5044 ---
**Author:** ![alpha\_gamma](https://avatars.discourse-cdn.com/v4/letter/a/59ef9b/32.png) [@alpha\_gamma](https://discuss.elastic.co/u/alpha_gamma)\ **Post date:** [January 6, 2018, 5:15pm UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/13 "2018-01-06T17:15:22Z")
input { beats { port =\> 5044 type =\> "logs" ssl =\> true ssl\_certificate =\> "/etc/pki/tls/certs/filebeat.crt" ssl\_key =\> "/etc/pki/tls/private/filebeat.key" } } ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [January 6, 2018, 5:25pm UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/14 "2018-01-06T17:25:07Z")
Well, "connection refused" means that there was nobody listening on that port on that interface, or that a firewall is blocking the access. Double-check port numbers, use netstat to check which ports are being listened to, and verify the firewall status. ---
**Author:** ![alpha\_gamma](https://avatars.discourse-cdn.com/v4/letter/a/59ef9b/32.png) [@alpha\_gamma](https://discuss.elastic.co/u/alpha_gamma)\ **Post date:** [January 7, 2018, 5:33am UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/15 "2018-01-07T05:33:38Z")
Hi Magnus, How can I use port 8080 if it is open.The port gets active when I start tomcat lets say I want to start 8080 without using tomcat .what is the command. ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [January 7, 2018, 9:43am UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/16 "2018-01-07T09:43:32Z")
Make sure Tomcat is shut down and doesn't start automatically, then change any 5044 port references to 8080. ---
**Author:** ![alpha\_gamma](https://avatars.discourse-cdn.com/v4/letter/a/59ef9b/32.png) [@alpha\_gamma](https://discuss.elastic.co/u/alpha_gamma)\ **Post date:** [January 7, 2018, 10:16am UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/17 "2018-01-07T10:16:15Z")
Yes Tomcat is surely shut down but then how to make 8080 working ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [January 7, 2018, 4:21pm UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/18 "2018-01-07T16:21:34Z")
As I said, change any 5044 port references (in your configuration files) to 8080. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 4, 2018, 4:21pm UTC](https://discuss.elastic.co/t/logstash-error-during-setup/114323/19 "2018-02-04T16:21:46Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.