Hi,
I have deployed a logstash server in one site (lets say A) and this logstash server push the data on elastic cluster on remote site (lets say B).
On site A I have around 500 hosts and I have installed the metricbeat agent on these 500 hosts and in config file (metricbeat.yml) enabled the settings to push the data on logstash.
output.logstash:
The Logstash hosts
hosts: ["localhost:5044"]
hosts: ["logstashserver:5044"]
And on logstash server under conf.d dir I have input and output conf file.
Input file:
input {
beats {
port => 5044
}
}
Output file:
output {
elasticsearch {
hosts => 'es_server:9200'
index => "metricbeat-%{+YYYY.MM.dd}"
}
}
But I see data is not uploading on ES cluster. Metricbeat log file says:
ERROR pipeline/output.go:74 Failed to connect: dial tcp x.y.z.a:5044: getsockopt: connection refused
While i am able to telnet the host on port 5044