Yeah, I supposed it, too. But they might be linked to the problem you're having.
This guy seemed to have had a very similar issue, but he cleverly thought not to write here his solution. You ca try to contact him in private.
Anyway, you sure your filebeat is actually getting something and sending it to logstash, right? Did you try a tcpdump to see the traffic between the two?