I'm setting up a few logstash-forwarder agents which will send logs to a central Logstash server, and need to choose a port for Logstash to listen on. After doing some searching, there doesn't seem to be a consensus about what this port number should be. The lumberjack protocol doesn't have a well-known port assignment as far as I can see.

The closest I was able to find as a convention was port 5000 (for example, here) but that strikes me as more of a tutorial, get-it-working-fast port.

Are there any established conventions for choosing this port number?

  • As far as I know there isn't one. – Michael Hampton Jan 16 '15 at 18:37

default is 9200 as described in the logstash documentation: http://logstash.net/docs/1.4.2/inputs/elasticsearch

| improve this answer | |
  • That's the Elasticsearch port; I'm looking for the logstash-forwarder (lumberjack) port that the raw, unfiltered log messages enter through before Logstash processes them. – smitelli Jan 16 '15 at 16:23

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.