Question

Connection refused elasticsearch on ubuntu 20.04

good afternoon guys my English is not very good but I will try to explain

myself I have a test server here at digitalocean with ubuntu 20.04 and I installed elasticsearch for log collection on another client machine right here on digitalocean, but the error below happens when I try to install auditbeat on the client machine

root@ubuntu-teste-elastic-Nginx:~# auditbeat setup
Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: 
[error connecting to Elasticsearch at https://137.184.57.230:9200:
Get "https://137.184.57.230:9200": dial tcp 137.184.57.230:9200: connect: connection refused]

Already followed this tutorial added rules in the server firewall elasticsearch however it did not work

https://www.digitalocean.com/community/tutorials/how-to-install-and- configure-elasticsearch-on-ubuntu-20-04

since i’m grateful to anyone who can contribute


Submit an answer
Answer a question...

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

Sign In or Sign Up to Answer

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

KFSys
Site Moderator
Site Moderator badge
September 25, 2022

Hi @smallaquaeel,

Check your firewall - Iptables or UFW do see if you’ve denied access to port 9200. That’s my best guess and this point.

KFSys
Site Moderator
Site Moderator badge
September 19, 2022

Hi @smallaquaeel,

It does seem like na firewall issue. Make sure you’ve allowed 9200 port in ufw or iptables depending on what you are using.

Additionally, ty to configure Elasticsearch to first listen to localhost to see if it would work.