Back to Beats

Logstash connection doesn't work [connection-problem]

docs/reference/auditbeat/connection-problem.md

9.4.0995 B
Original Source

Logstash connection doesn't work [connection-problem]

You may have configured {{ls}} or Auditbeat incorrectly. To resolve the issue:

  • Make sure that {{ls}} is running and you can connect to it. First, try to ping the {{ls}} host to verify that you can reach it from the host running Auditbeat. Then use either nc or telnet to make sure that the port is available. For example:

    shell
    ping <hostname or IP>
    telnet <hostname or IP> 5044
    
  • Verify that the config file for Auditbeat specifies the correct port where {{ls}} is running.

  • Make sure that the {{es}} output is commented out in the config file and the {{ls}} output is uncommented.

  • Confirm that the most recent Beats input plugin for {{ls}} is installed and configured. Note that Beats will not connect to the Lumberjack input plugin. To learn how to install and update plugins, see Working with plugins.