Nagios Support Forum

Hi,

the default configuration is that elasticsearch, logstash and kibana are running on the same server.

I would like to use a logstash instance on another server to push messages into the same elasticsearch. This means having two instances of logstash on different servers pumping data into one elasticsearch instance of logserver.
My problem where I am stuck is, how to change the configuration of elasticsearch to be accessible from the outside / other computers.

The main idea behind that is to test, if I can use elastic's topbeat with external logstash >= 1.5.4 and have the data logserver's elasticsearch.
If it is not corrupting elasticsearch it may be a suitable workaround. I am aware that I cannot manage the external logstash via logservers gui, but that's ok for me.

BTW, is there now any roadmap when logstash will be updated?

Keep in mind your use case is a bit out of scope for what we normally support. With that said, the file you'll need to modify to allow Elasticsearchs API open is going to be /usr/local/nagioslogserver/elasticsearch/config/elasticsearch.yml. Once you open this up, there is nothing restricting it, so keep that in mind.

Look for the following variables, uncomment all of them, and adjust as needed -