Telnet - which IP address do i try to telnet to?

Elastic Stack Beats
1

Hi, I get this message in my winlogbeat logs :

{"file.name":"beater/winlogbeat.go","file.line":149},"message":"Winlogbeat is unable to load the ingest pipelines because the Elasticsearch output is not configured/enabled. If you have already loaded the ingest pipelines, you can ignore this warning.","service.name":"winlogbeat","ecs.version":"1.6.0"}

it was suggested that :
That means winlogbeat can not connect to elasticsearch.

I wanted to try telnet, but i am not sure which IP address i should use, my ipconfig Ipv4, my WMware IP network Addresses or the static IP address i use to connect to the SOC?

thanks very much for your help or advice

2

You are most likely trying to run .\winlogbeat setup -e with the output pointed to something other than elasticsearch.

Please share the output section of winlogbeat.yml

Are you pointing to logstash?

Which is okay if that's what you intend to do.

3

Hi Stephen, i continued with this title with another title because i dont think telnet is my exact issue.
when you get time, please feel free to look at this link.

thanks as usual for your help and advice

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.