Hello, I have troubles with configuration winlogbeat for windows, I install this in Powershell, the result is below: PS C:\winlogbeat> .\winlogbeat.exe -c .\winlogbeat.yml -configtest -e 2016/03/21 17:51:56.872778 geolite.go:24: INFO GeoIP disabled: No paths were set under output.geoip.paths 2016/03/21 17:52:17.896676 outputs.go:119: INFO Activated elasticsearch as output plugin. 2016/03/21 17:52:17.896676 publish.go:288: INFO Publisher name: ultimate 2016/03/21 17:52:17.898675 async.go:78: INFO Flush Interval set to: 1s 2016/03/21 17:52:17.899675 async.go:84: INFO Max Bulk Size set to: 50 2016/03/21 17:52:17.899675 beat.go:147: INFO Init Beat: winlogbeat; Version: 1.1.2 2016/03/21 17:52:17.900675 winlogbeat.go:87: INFO State will be read from and persisted to C:\ProgramData\winlogbeat\.winlogbeat.yml 2016/03/21 17:52:17.900675 checkpoint.go:258: INFO Creating C:\ProgramData\winlogbeat if it does not exist. in winlogbeat.yml in section "Output" I made change in hosts, elasticsearch: hosts: ["192.168.1.52:9200"] 192.168.1.52 is my server with ELK software, I don't know what change more in order to my client machine could connect to server. I checked winlogbeat logs and found this information: 2016-03-21T18:53:56+01:00 INFO Connecting error publishing events (retrying): Head http://192.168.1.52:9200: dial tcp 192.168.1.52:9200: connectex: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. 2016-03-21T18:53:56+01:00 INFO send fail 2016-03-21T18:53:56+01:00 INFO backoff retry: 2s What am I doing wrong, that client machine can't connect to server?