Trying to forward multiple filebeats via a filebeat relay

Elastic Stack Beats
#1

Hello,
I have multiple machines running filebeat and a logstash host in my cloud environment.
To minimize firewall impact, I created a single VM to be a relay, and forward everything from the other filebeats to the outside world.

For some reason this doesn't work.
Has anyone tried this before?

Here is an example yml setup:
filebeat.inputs:
- type: tcp
host: "localhost:{{inbound-port}}"
output.logstash:
enabled: true
hosts: ["my_logstash_host:9999"]
ssl:
verification_mode: "none"

Similar past post (locked):

Thanks in advance!
JD

#2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.