#logstash

2 hours gone. What did I find out? Elastisearch needs iptables to allow outbound icmp for multicast to work.

you mean if they're enabled? or for every configuration?

mortini_: multicast is turned on by the default configuration.

So nope, that was not it.

apparently the only reason it worked that time was because the multicast connected as i restarted the iptables