SYN_SENT:CLOSED to ELK server on Hyper-V
I was wondering if someone could help me or guide me what could be the issue when trying to open the NAT ports on my ELK server I followed this guide, also changed the http port on pfSense to 81
then at the part where it says "Kibana is now accessible via your FQDN or the public IP address of your Logstash Server i.e. http://logstash_server_public_ip/. If you go there in a web browser, after entering the "kibanaadmin" credentials, you should see a Kibana welcome page which will ask you to configure an index pattern. Let's get back to that later, after we install all of the other components."
I would enter http://181.137.97.XXX:5601
and nothing then I would check states on pfSense shows SYN_SENT:CLOSED which means either its not replying or missing the gateway which then i check ifconfig and shows the gateway is 192.168.3.254
My NAT set up see pictures.
But if I would go to the Gui on Cent OS and type localhost:5601 it shows Kibana so i know its working but now its the ports that im unsure about if its working.
Alright so I ended up installing ELK on lbuntu and make it internally I am currently making a tutorial for anyone wanting to have a ELK server for pfSense logs
Id love this! I tried to follow that tutorial and it turned into a nightmare.
haha yeah i made my own guide :) let me know how it goes