So I can see that the elasticsearch node receives data from the logstash node (tcpdump src logstashnodeIP):
https://pastebin.com/tZHmKzh6
But somehow only after the restart of the logstash service and then after that, no more data is sent / received. Weird...
//edit: Elasticsearch logs: https://pastebin.com/HFmzzBzV