WinBeat Config for AWS

Has anyone set this up? I'm trying to follow the readme and other configs I've seen however I keep getting errors connecting to it.

2019-04-02T13:18:18.271-0700 ERROR pipeline/output.go:100 Failed to connect to backoff(elasticsearch(https://AWSURL:9200)): Get https://AWSURL:9200: dial tcp connectex: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.

I cannot use port 9200 and 5601 that I see listed, and in the past have used for our onprem, as AWS has not opened those ports on this hosted service.

Is there a AWS guide? I've tried the documentation at using both 80/443 and 9200 and still nothing is allowed.

Have you looked at the Security Inbound Rules in AWS?

Are you able to telnet to port 9200 on the AWS server? If you cannot connect to the port, then you need to work on AWS to get the port opened up.

It's a hosted Service so there's no security groups, Servers or rules in play. on the setup it'll ask you if you want to restrict to a certain ip range or values or you can also choose Completely Open to the public which is what I selected as it's a POC with dummy data.

My bad, I was thinking EC2.

You may want to take a look at the logstash-output-amazon-es to connect.

For opening up access you can work with the Amazon Elastic Service Access Control:

The bottom of this article has some info on using output plugins for Amazon:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.