Need to know Topbeat & Filebeat using which protocol & which port number should be open to deploy filebeat & topbeat on linux server

[priti (priti bhangale)]

Need to know Topbeat & Filebeat using which protocol & which port number should be open to deploy filebeat & topbeat on linux server

[steffens (Steffen Siering)]

topbeat is deprecated for a while and replaced by metricbeat (supporting many more metrics) in 5.0 release.

beats do ship their data to some configurable endpoint (kafka, redis, logstash, elasticsearch). Port number and protocol depends on endpoint.

[priti (priti bhangale)]

I am using endpoint as logstash as well as elasticsearch in this case could you please suggest which protocol & Ports needs to be open ?

[steffens (Steffen Siering)]

Well, you have to figure out which ports these services have configured. Elasticsearch by default uses HTTP on port 9200. Logstash is based on Lumberjack protocol (via TCP). Often users configure port 5044 for beats->Logstash.

[priti (priti bhangale)]

Thanks Steffen