Logstash Installation

Elastic Stack Logstash
1

Hi Team,
I successfully tested Beats (Filebeat,topbeat,packetbeat) => ElasticSearch now i am trying for Beats => Logstash => Elasticsearch.

But i am getting error at beat end, though all traffic is allowed. I found some reading about logstash-input-beats. Do i need to install plugins to make logstash working? i was expecting it should work the way it worked with elasticsearch.

dial tcp w.x.y.z:5044: getsockopt: connection refused

Beat configuration:
hosts: ["logstash:5044"]

Logstash Configuration:

input {
beats {
port => 5044
ssl => false
}
}
output {
elasticsearch {
hosts => ["http://a.b.c.d:9200"]
sniffing => true
manage_template => false
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
file {
path => "/test/logstash/fileout.put"
}
}

Regards...

2

Can you telnet from the beats host to the LS one on port 5044? If not then there may be a firewall or other networking things stopping you.

3

ports were listening.
I was looking at beat servers but found an issue on logstash server. I configured output to elasticsearch and a file. The file location had permission issue so logstash was failing. It's resolved now.

Thanks & Regards...