Hi I've setup filebeat on the machine A elasticsearch and kibana on machine B and logstash on machine C. When i try to send logs from filebeat to logstash i am getting a connection refused error in status. all the services are active. The indexes are not getting created in kibana
This is my filebeat.yml
filebeat.inputs:
# Each - is an input. Most options can be set at the input level, so
# you can use different inputs for various configurations.
# Below are the input specific configurations.
# filestream is an input for collecting log messages from files.
- type: syslog
enabled: false
- type: log
enabled: true
paths:
- /var/log/elasticsearch/elasticsearch.log
fields:
type: elasticsearch_syslog
fields_under_root: true
- type: log
enabled: true
paths:
- /var/log/kibana/kibana.log
fields:
type: kibana_syslog
fields_under_root: true
output.logstash:
# The Logstash hosts!!
hosts: ["logstash_ip:5044"]
bulk_max_size: 200
This is logstash conf file
input {
beats {
port => 5044
}
}
output {
elasticsearch {
hosts => "http://elasticsearch:9200"
index => "%{type}%{+YYYY.MM.dd}"
user => "elastic"
password => "******"
}
}
When i curl to localhost:5044
root@ip-10-0-15-99:/etc/logstash/conf.d# curl http://localhost:5044
curl: (56) Recv failure: Connection reset by peer
root@ip-10-0-15-99:/etc/logstash/conf.d# curl http://localhost:5044
curl: (1) Received HTTP/0.9 when not allowed
same error when i curl from filebeat machine to logstash