Hi,
Would appreciate your input into this exception I'm seeing with the beats input:
{: timestamp => "2016-07-14T16:18:11.269000+0100", : message => "Beats input: unhandled exception", : exception => # < NoMethodError: undefined method force_encoding' for false:FalseClass>, :backtrace=>["/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.1.3-java/lib/logstash/util/charset.rb:14:in
convert '", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-codec-plain-2.0.2/lib/logstash/codecs/plain.rb:35:in decode' ", " / opt / logstash / vendor / bundle / jruby / 1.9 / gems / logstash - input - beats - 2.1 .3 / lib / logstash / inputs / beats.rb: 33: in
accept'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-codec-multiline-2.0.9/lib/logstash/codecs/identity_map_codec.rb:177:in accept '", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-beats-2.1.3/lib/logstash/inputs/beats_support/connection_handler.rb:58:in
process'
", " / opt / logstash / vendor / bundle / jruby / 1.9 / gems / logstash - input - beats - 2.1 .3 / lib / logstash / inputs / beats_support / connection_handler.rb: 33: in accept'", "org/jruby/RubyProc.java:281:in
call '", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-beats-2.1.3/lib/lumberjack/beats/server.rb:429:in data' ", " / opt / logstash / vendor / bundle / jruby / 1.9 / gems / logstash - input - beats - 2.1 .3 / lib / lumberjack / beats / server.rb: 408: in
read_socket'", "org/jruby/RubyProc.java:281:in call '", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-beats-2.1.3/lib/lumberjack/beats/server.rb:420:in
ack_if_needed'
", " / opt / logstash / vendor / bundle / jruby / 1.9 / gems / logstash - input - beats - 2.1 .3 / lib / lumberjack / beats / server.rb: 404: in read_socket'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-beats-2.1.3/lib/lumberjack/beats/server.rb:261:in
json_data_payload '", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-beats-2.1.3/lib/lumberjack/beats/server.rb:178:in feed' ", " / opt / logstash / vendor / bundle / jruby / 1.9 / gems / logstash - input - beats - 2.1 .3 / lib / lumberjack / beats / server.rb: 311: in
compressed_payload'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-beats-2.1.3/lib/lumberjack/beats/server.rb:178:in feed '", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-beats-2.1.3/lib/lumberjack/beats/server.rb:389:in
read_socket'
", " / opt / logstash / vendor / bundle / jruby / 1.9 / gems / logstash - input - beats - 2.1 .3 / lib / lumberjack / beats / server.rb: 369: in run'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-beats-2.1.3/lib/logstash/inputs/beats_support/connection_handler.rb:33:in
accept '", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-beats-2.1.3/lib/logstash/inputs/beats.rb:177:in handle_new_connection' ", " / opt / logstash / vendor / bundle / jruby / 1.9 / gems / logstash - input - beats - 2.1 .3 / lib / logstash / inputs / beats_support / circuit_breaker.rb: 42: in
execute'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-beats-2.1.3/lib/logstash/inputs/beats.rb:177:in handle_new_connection '", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-beats-2.1.3/lib/logstash/inputs/beats.rb:133:in
run'
"], :level=>:error}
Input config looks like this:
beats {
port => 5044
tags => ["beats"]
type => "beats"
}
We have some sources running on libbeat 5.0. Would that cause this?
Regards,
David