From b6eb747a4ad9b152338956357f8f1723958a30d3 Mon Sep 17 00:00:00 2001
From: Evan <binary-signal@users.noreply.github.com>
Date: Sun, 17 Jul 2022 00:00:38 +0200
Subject: [PATCH] fix: Logstash TCP input uses IANA registered port 5000

---
 .github/workflows/ci.yml                    | 4 ++--
 .github/workflows/scripts/run-tests-core.sh | 2 +-
 README.md                                   | 6 +++---
 docker-compose.yml                          | 4 ++--
 extensions/logspout/README.md               | 2 +-
 extensions/logspout/logspout-compose.yml    | 2 +-
 logstash/pipeline/logstash.conf             | 2 +-
 7 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 86d9eed..26a387a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -89,7 +89,7 @@ jobs:
 
           # Set mandatory Logstash settings
 
-          sed -i '$ a input { udp { port => 5000 codec => json } }' logstash/pipeline/logstash.conf
+          sed -i '$ a input { udp { port => 50000 codec => json } }' logstash/pipeline/logstash.conf
 
           # Restart Logstash for changes to take effect
 
@@ -102,7 +102,7 @@ jobs:
 
           # Revert changes to Logstash configuration
 
-          sed -i '/input { udp { port => 5000 codec => json } }/d' logstash/pipeline/logstash.conf
+          sed -i '/input { udp { port => 50000 codec => json } }/d' logstash/pipeline/logstash.conf
           docker compose restart logstash
 
       - name: 'debug: Display state and logs (Logspout)'
diff --git a/.github/workflows/scripts/run-tests-core.sh b/.github/workflows/scripts/run-tests-core.sh
index 51f9664..f5cf070 100755
--- a/.github/workflows/scripts/run-tests-core.sh
+++ b/.github/workflows/scripts/run-tests-core.sh
@@ -30,7 +30,7 @@ declare -i was_retried=0
 
 # retry for max 10s (5*2s)
 for _ in $(seq 1 5); do
-	if echo 'dockerelk' | nc -q0 "$ip_ls" 5000; then
+	if echo 'dockerelk' | nc -q0 "$ip_ls" 50000; then
 		break
 	fi
 
diff --git a/README.md b/README.md
index 81be47d..7cf6f69 100644
--- a/README.md
+++ b/README.md
@@ -92,7 +92,7 @@ own_. [sherifabdlnaby/elastdocker][elastdocker] is one example among others of p
 By default, the stack exposes the following ports:
 
 * 5044: Logstash Beats input
-* 5000: Logstash TCP input
+* 50000: Logstash TCP input
 * 9600: Logstash monitoring API
 * 9200: Elasticsearch HTTP
 * 9300: Elasticsearch TCP transport
@@ -221,12 +221,12 @@ allows you to send content via TCP:
 
 ```console
 # Using BSD netcat (Debian, Ubuntu, MacOS system, ...)
-$ cat /path/to/logfile.log | nc -q0 localhost 5000
+$ cat /path/to/logfile.log | nc -q0 localhost 50000
 ```
 
 ```console
 # Using GNU netcat (CentOS, Fedora, MacOS Homebrew, ...)
-$ cat /path/to/logfile.log | nc -c localhost 5000
+$ cat /path/to/logfile.log | nc -c localhost 50000
 ```
 
 You can also load the sample data provided by your Kibana installation.
diff --git a/docker-compose.yml b/docker-compose.yml
index ce43584..6cc590b 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -59,8 +59,8 @@ services:
       - ./logstash/pipeline:/usr/share/logstash/pipeline:ro,Z
     ports:
       - "5044:5044"
-      - "5000:5000/tcp"
-      - "5000:5000/udp"
+      - "50000:50000/tcp"
+      - "50000:50000/udp"
       - "9600:9600"
     environment:
       LS_JAVA_OPTS: -Xms256m -Xmx256m
diff --git a/extensions/logspout/README.md b/extensions/logspout/README.md
index f6a4d2b..2e34648 100644
--- a/extensions/logspout/README.md
+++ b/extensions/logspout/README.md
@@ -17,7 +17,7 @@ In your Logstash pipeline configuration, enable the `udp` input and set the inpu
 ```logstash
 input {
   udp {
-    port  => 5000
+    port  => 50000
     codec => json
   }
 }
diff --git a/extensions/logspout/logspout-compose.yml b/extensions/logspout/logspout-compose.yml
index a603c3f..8af149d 100644
--- a/extensions/logspout/logspout-compose.yml
+++ b/extensions/logspout/logspout-compose.yml
@@ -10,7 +10,7 @@ services:
         target: /var/run/docker.sock
         read_only: true
     environment:
-      ROUTE_URIS: logstash://logstash:5000
+      ROUTE_URIS: logstash://logstash:50000
       LOGSTASH_TAGS: docker-elk
     networks:
       - elk
diff --git a/logstash/pipeline/logstash.conf b/logstash/pipeline/logstash.conf
index b61029b..5ac8861 100644
--- a/logstash/pipeline/logstash.conf
+++ b/logstash/pipeline/logstash.conf
@@ -4,7 +4,7 @@ input {
 	}
 
 	tcp {
-		port => 5000
+		port => 50000
 	}
 }