Port required for filebeat agent

Elastic Stack Beats
1

We have planning to deploy Filebeat agent for log monitoring but need some information.

  1. If i have to transfer log data beat to logstash , which port needs to be open on application server where log present?
  2. If i have to transfer log data beats to kafka , which port needs to be open on application server where log present?
2

  1. The default port for Beats -> LS depends on what you have configured on the beats input on the Logstash side, usually people use 5044.

  2. Kafka TCP connection usually uses 9092 you might to look at the kafka documentation

3

Priti, I think you are asking about the source ports, not the destination. The agent will open a random high port (> 5000) on the source side (application server), then connect to port 5044 (by default) on the log stash server. Same pattern for the kafka connection: random high port -> 9092.

1 Like
4

Thank you

5

Thank you

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.