Cant Connect beats agent to Elasticsearch and Kibaba on port 8220 and 9200 on Securityonion

[seyiakilude]

Version

2.4.10

Installation Method

Security Onion ISO image

Description

other (please provide detail below)

Installation Type

Standalone

Location

other (please provide detail below)

Hardware Specs

Exceeds minimum requirements

CPU

8

RAM

16GB

Storage for /

250GB

Storage for /nsm

1,015.75 GB / 558.69 GB Free

Network Traffic Collection

other (please provide detail below)

Network Traffic Speeds

1Gbps to 10Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

No, there are no failures

Logs

Yes, there are additional clues in /opt/so/log/ (please provide detail below)

Detail

I am trying to import Netflow data from a windows machine with filebeats installed but cant connect to Securityonion on port 8220 for Kibana and 9200 on Elasticsearch.

The error message is no response on the ports respectively.

Guidelines

• I have read the above statement and can confirm my post is relevant to Security Onion 2.4.

[seyiakilude]

Here is me trying again

[dougburks]

You say above that you are running version 2.4.10. However, your screenshots appear to show an older version.

Please perform a fresh installation of 2.4.20 or the latest version shown at https://securityonion.net/download. You can then deploy the Elastic Agent to endpoints as shown at https://docs.securityonion.net/en/2.4/elastic-agent.html.