Logstash listening


Assuming filebeat -> ELK are on different machines.

On the filebeat output i have to specify the IP address of the Logstash host. However I can´t see any option to bind my server IP address to Logstash. All the tutorials show "localhost:5044", but my logstash is not on the same machine has filebeat.

The beats input has a host option. The default is, which is all the external IPs of your server.

So on the filebeat output i use the same IP as the beats input right?

No. In the output section of your filebeat.yml specify the IP address of the logstash server.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.