# Logstash not listening on port 5044

**URL:** https://discuss.elastic.co/t/logstash-not-listening-on-port-5044/198475
**Category:** Logstash
**Created:** [September 6, 2019, 7:22pm UTC](https://discuss.elastic.co/t/logstash-not-listening-on-port-5044/198475 "2019-09-06T19:22:42Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![fastxl](https://avatars.discourse-cdn.com/v4/letter/f/85e7bf/32.png) [@fastxl](https://discuss.elastic.co/u/fastxl)
#### Post date: [September 6, 2019, 7:22pm UTC](https://discuss.elastic.co/t/logstash-not-listening-on-port-5044/198475/1 "2019-09-06T19:22:42Z")

</div>

I have setup a ELK node that I want to send some logs to via WinLogBeats. Using Ubuntu 18 server. I can ping the node by the ip address and the FQDN, but when I do a `Test-NetConnection` via powershell it fails. When I do a `netstat -an | grep 5044` I get nothing. My input file is

```
input {
   beats {
        port => 5044
}
   udp { 
        type => pfLogs
        port => 5140
 }
}

```

No firewall running. Not sure what to try.

---

<div class="post-metadata">

### Author: ![spuder](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spuder/32/44895_2.png) [@spuder](https://discuss.elastic.co/u/spuder)
#### Post date: [September 6, 2019, 9:22pm UTC](https://discuss.elastic.co/t/logstash-not-listening-on-port-5044/198475/2 "2019-09-06T21:22:28Z")

</div>

Try running `netstat -plnt` to show all listening services on the logstash server.

It could be that the service is not bound to a public ip.  
It could be that it is only listening on ipv6

Post the output here.

---

<div class="post-metadata">

### Author: ![fastxl](https://avatars.discourse-cdn.com/v4/letter/f/85e7bf/32.png) [@fastxl](https://discuss.elastic.co/u/fastxl)
#### Post date: [September 9, 2019, 1:53pm UTC](https://discuss.elastic.co/t/logstash-not-listening-on-port-5044/198475/3 "2019-09-09T13:53:51Z")

</div>

Appears that it is listening on TCP6 but not TCP?

```
Active Internet connections (only servers)
    Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
    tcp 0 0 127.0.0.1:5601 0.0.0.0:* LISTEN 678/node
    tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN 534/systemd-resolve
    tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 726/sshd
    tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 745/nginx: master p
    tcp6 0 0 127.0.0.1:9600 :::* LISTEN 658/java
    tcp6 0 0 127.0.0.1:9200 :::* LISTEN 654/java
    tcp6 0 0 :::5044 :::* LISTEN 658/java
    tcp6 0 0 127.0.0.1:9300 :::* LISTEN 654/java
    tcp6 0 0 :::22 :::* LISTEN 726/sshd

```

After disabling IPV6 it seems to be listening on tcp 5044 now

```
    Active Internet connections (only servers)
    Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
    tcp 0 0 127.0.0.1:9200 0.0.0.0:* LISTEN 650/java
    tcp 0 0 0.0.0.0:5044 0.0.0.0:* LISTEN 667/java
    tcp 0 0 127.0.0.1:9300 0.0.0.0:* LISTEN 650/java
    tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN 533/systemd-resolve
    tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 707/sshd
    tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 738/nginx: master p
    tcp 0 0 127.0.0.1:9600 0.0.0.0:* LISTEN 667/java
    tcp 0 0 127.0.0.1:5601 0.0.0.0:* LISTEN 655/node
```

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 7, 2019, 1:53pm UTC](https://discuss.elastic.co/t/logstash-not-listening-on-port-5044/198475/4 "2019-10-07T13:53:52Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
