# Ship Filebeat data to public IP Logstash

**URL:** https://discuss.elastic.co/t/ship-filebeat-data-to-public-ip-logstash/93855
**Category:** Beats
**Tags:** filebeat
**Created:** [July 20, 2017, 2:49am UTC](https://discuss.elastic.co/t/ship-filebeat-data-to-public-ip-logstash/93855 "2017-07-20T02:49:47Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![jogoinar10](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jogoinar10/32/20068_2.png) [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)
#### Post date: [July 20, 2017, 2:49am UTC](https://discuss.elastic.co/t/ship-filebeat-data-to-public-ip-logstash/93855/1 "2017-07-20T02:49:47Z")

</div>

I want to connect 2 different machines over the internet.  
My server is on public IP which holds the logstash and elasticsearch.  
It is possible to send data(filebeat) to the public ip server(logstash/elasticsearch)  
Can you share a config example?  
What are the security measures if this is possible?

Thank you!

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [July 20, 2017, 2:54am UTC](https://discuss.elastic.co/t/ship-filebeat-data-to-public-ip-logstash/93855/2 "2017-07-20T02:54:40Z")

</div>

That would be the standard setup. You can follow the [Getting Started Guide](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-getting-started.html) then take a look at [Security Communication With Logstash](https://www.elastic.co/guide/en/beats/filebeat/current/configuring-ssl-logstash.html).

---

<div class="post-metadata">

### Author: ![jogoinar10](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jogoinar10/32/20068_2.png) [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)
#### Post date: [July 20, 2017, 4:12am UTC](https://discuss.elastic.co/t/ship-filebeat-data-to-public-ip-logstash/93855/3 "2017-07-20T04:12:03Z")

</div>

Will look into it @andrewkroh. Right now my beat and logstash are working fine but it is on the local network only. I want to setup over the internet direct connection.

---

<div class="post-metadata">

### Author: ![jogoinar10](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jogoinar10/32/20068_2.png) [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)
#### Post date: [July 26, 2017, 1:59am UTC](https://discuss.elastic.co/t/ship-filebeat-data-to-public-ip-logstash/93855/4 "2017-07-26T01:59:37Z")

</div>

Hello @andrewkroh, I'd check the Security Communication with logstash and i've found out that it is the security transfer from the beats to the logstash.  
This may also work but it there a way where the logstash is the one who will send the data to the elasticsearch thru ssl? Since the logstash is still in my local network and I will send the data to the public ip bearing elasticsearch(thru internet).

TIA 😃

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [July 26, 2017, 2:07am UTC](https://discuss.elastic.co/t/ship-filebeat-data-to-public-ip-logstash/93855/5 "2017-07-26T02:07:35Z")

</div>

The communication between Logstash and Elasticsearch is over HTTP. You can use [X-Pack](https://www.elastic.co/guide/en/x-pack/current/xpack-security.html) to get HTTPS enabled on the Elasticsearch side. And then configure the [elasticsearch output](https://www.elastic.co/guide/en/logstash/5.5/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-ssl) in your Logstash config to use https.

---

<div class="post-metadata">

### Author: ![jogoinar10](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jogoinar10/32/20068_2.png) [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)
#### Post date: [July 26, 2017, 2:13am UTC](https://discuss.elastic.co/t/ship-filebeat-data-to-public-ip-logstash/93855/6 "2017-07-26T02:13:18Z")

</div>

Is there any other way to send from logstash to elasticsearch? As of now I just open the port 9200 in the firewall.

But I look into this @andrewkroh. Thank you for your input 😃

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [July 26, 2017, 12:11pm UTC](https://discuss.elastic.co/t/ship-filebeat-data-to-public-ip-logstash/93855/7 "2017-07-26T12:11:34Z")

</div>

> [@jogoinar10](#):
>
> Is there any other way to send from logstash to elasticsearch?

Are you asking if there is any way other than HTTP/HTTPS to send data from LS to ES? That's the only method. Why do you need another method?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 23, 2017, 12:11pm UTC](https://discuss.elastic.co/t/ship-filebeat-data-to-public-ip-logstash/93855/8 "2017-08-23T12:11:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
