# Which Ports for Logstash and FileBeat

**URL:** <https://discuss.elastic.co/t/which-ports-for-logstash-and-filebeat/122715>\
**Category:** Logstash\
**Created:** [March 6, 2018, 12:12pm UTC](https://discuss.elastic.co/t/which-ports-for-logstash-and-filebeat/122715 "2018-03-06T12:12:20Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![cawoodm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cawoodm/32/14083_2.png) [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Post date:** [March 6, 2018, 12:12pm UTC](https://discuss.elastic.co/t/which-ports-for-logstash-and-filebeat/122715/1 "2018-03-06T12:12:20Z")

</div>

I'm trying to understand which ports Logstash listens on when sending logs from FileBeat to Logstash.

In the logstash.yml we see **http.port: 9600-9700** descibed as "Bind address for the metrics REST endpoint".

In the filebeat.yml we see **#hosts: ["localhost:5044"]** described as \*The Logstash hosts".

Not clear to me what either setting means and it does not get clearer reading the docs which mirror the yml comments.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [March 6, 2018, 12:33pm UTC](https://discuss.elastic.co/t/which-ports-for-logstash-and-filebeat/122715/2 "2018-03-06T12:33:07Z")

</div>

Logstash's `http.port` setting chooses on which port Logstash should expose its management API. It has **nothing** to do with the Filebeat communication. Ignore it for now.

Filebeat's `hosts` setting points to the hostname and port where you have configured Logstash's beats input plugin to listen. Port 5044 is frequently used but you can pick any unused port.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 3, 2018, 12:33pm UTC](https://discuss.elastic.co/t/which-ports-for-logstash-and-filebeat/122715/3 "2018-04-03T12:33:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.