OPNSense - Connection refused on X.X.X.X:5140

[Ernaw]

Hello, after success to implement my wazuh on same server of PFELK , my OPNSense cant send log suricata with SYSLOG :

.

Status of service logstash is ok. but the strange i do not recover any log from
tail -25 /var/log/logstash/logstash-plain.log

I lose my hair with this problem..

[Ernaw]

I can ping my server PFELK

but nothing with curl localhost:5140

[Ernaw]

Update:
the problème is logstash service restart all the 20s :

[Ernaw]

I hate me ,
journalctl --unit logstash have save me.
Problem line on conf