9600
Logstash Monitoring
Medium RiskTCP — System & Infrastructure
Port Overview
Port Number
9600
Service Name
Logstash Monitoring
Transport Protocol
TCP
Category
System & Infrastructure
Security Risk
Medium
Port Range
Registered (1024-49151)
What is Port 9600?
Port 9600 is the default port for Logstash's monitoring API, which provides metrics and pipeline information for the Logstash log processing pipeline. This API is used by Kibana to display Logstash pipeline statistics and health information in the Elastic Stack monitoring dashboards. It is also used for direct Logstash management and diagnostics.
TCP
System & Infrastructure
Security Considerations
Port 9600 (Logstash Monitoring) is classified as medium risk. While this service is commonly exposed, consider using encrypted alternatives where available.
Recommendation: Keep the service updated. Monitor logs for unusual activity.