Logstash listens on IPV6 only


(X Calibur) #1

I have the following config file:

input{
beats{
port => "5043"
}
}

output{
elasticsearch {
hosts => ["localhost:9200"]
index => "winlogbeat"
document_type => "%{[@metadata][type]}"
user => "USERNAME"
password => "PASS"

    }

}

However, when running netstat -tulpn it seems that port 5043 is being listen for IPV6 only.
I believe that this is why I keep getting timeouts when trying to send over logs.

Appreciate the help,
thanks

X


(X Calibur) #2

Well, oddly enough it seems to work even though it only listens on ipv6 according to netstat...

I needed to create a user and give it permissions on the index.
now it works.


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.