Logstash listening


Assuming filebeat -> ELK are on different machines.

On the filebeat output i have to specify the IP address of the Logstash host. However I can´t see any option to bind my server IP address to Logstash. All the tutorials show "localhost:5044", but my logstash is not on the same machine has filebeat.

The beats input has a host option. The default is, which is all the external IPs of your server.

So on the filebeat output i use the same IP as the beats input right?

No. In the output section of your filebeat.yml specify the IP address of the logstash server.