Troubleshooting: Elastic API Port numbers

Product/Components Affected

Affected Humio Versions

Humio, Filebeat, Winlogbeat, Metricbeat, Packetbeat

all

Symptoms

  • Log shippers cannot communicate with Humio

  • Humio doesn’t receive data from log shippers

Issue

Using using a log-shipper with Humio that uses the Elasticsearch port, the correct port should be used depending on the Humio target and where it is hosted.

Cause

The default port used for Elasticsearch is port 9200, while the port for use with Humio Cloud you must use port 443.

Solution

Use the following ports

Configuration

Port

URL

Humio EU Cloud

443

https://cloud.humio.com:443/

Humio EU Cloud Bulk Ingest

443

https://cloud.humio.com:443/_bulk

Humio EU Cloud Bulk Ingest

443

https://cloud.humio.com:443/api/v1/ingest/elastic-bulk

Humio US Cloud

443

https://cloud.us.humio.com:443/

Humio US Cloud Bulk Ingest

443

https://cloud.us.humio.com:443/_bulk

Humio US Cloud Bulk Ingest

443

https://cloud.us.humio.com:443/api/v1/ingest/elastic-bulk