I docker-compse ES, Graylog and MongoDB via this docu:
https://docs.graylog.org/en/3.1/pages/installation/docker.html (Example Version 3)
I opened Port 9200 on ES to connect with a filebeat, this is the normal OSS download exe for windows. I configured it to watch a test log file and output.elasticsearch to my ES. The index is being build and grows when I watch ES via Postman and add to my test log file.
I configured 2 beat inputs to listen on 1514 and the default 5042, but Graylog stays empty. I changed the search to all messages, but still empty and no received messages through the inputs.
Another question: Why do I need the Beats input, when filebeat pushed to ES and Graylog connects to ES?
I have the feeling I missed something big :o