Multiple network interfaces settings and X-PACK

Elastic Stack Logstash
1

Hello,

I have a server with 2 network interfaces, one on a private network and the other on internet.

On my private network, I have an elasticsearch cluster with X-PACK (ip-filtering). This cluster is not open on internet. I want that logstash communicates with the cluster.

How can I specify logstash to use a specific network interface?

2

I believe you can bind Logstash by specifying the ip address of the interface you want to use in your logstash.conf file. Mileage may vary

input {
tcp
{ host => "10.10.10.10" port => 5140 type => "json-tcp" debug => true }
}

3

Hello I was not clear enought, I think:

My logstash reads on files (input) and writes into the elasticsearch cluster (output)
The host where logstash runs has 2 network interfaces: a public interface eth0 IP:a.a.a.a and a private interface eth0:0 IP:b.b.b.b

In the security settings of elasticsearch.yml I put an IP filtering mentionning b.b.b.b

Now, How can I specify to logstash that it has to connect elasticsearch as the IP b.b.b.b and not a.a.a.a?

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.