Configuration error in filebeat in logstash


(Abdur Raqeeb) #1

Hi,

I am getting the below error after starting the filebeat

2018-03-10T06:29:01Z INFO Error publishing events (retrying): write tcp Agent-IP:46906->ELK-IP:5044: write: broken pipe
2018-03-10T06:29:24Z INFO Non-zero metrics in the last 30s: libbeat.logstash.call_count.PublishEvents=1 libbeat.logstash.publish.write_bytes=40140 libbeat.logstash.publish.write_errors=1 libbeat.logstash.published_but_not_acked_events=1998
2018-03-10T06:29:54Z INFO No non-zero metrics in the last 30s
2018-03-10T06:30:01Z ERR Failed to publish events (host: ELK-IP:5044:10200), caused by: write tcp Agent-IP:46998->ELK-IP:5044: write: connection reset by peer
2018-03-10T06:30:01Z INFO Error publishing events (retrying): write tcp Agent-IP:46998->ELK-IP:5044: write: connection reset by peer
2018-03-10T06:30:24Z INFO Non-zero metrics in the last 30s: libbeat.logstash.call_count.PublishEvents=1 libbeat.logstash.publish.write_bytes=40140 libbeat.logstash.publish.write_errors=1 libbeat.logstash.published_but_not_acked_events=1998
2018-03-10T06:30:54Z INFO No non-zero metrics in the last 30s
2018-03-10T06:31:02Z ERR Failed to publish events (host: ELK-IP:5044:10200), caused by: write tcp Agent-IP:47090->ELK-IP:5044: write: broken pipe

Request you to please check and suggest the same.


(ruflin) #2

It seems there is a problem with sending the data to Logstash. Please share your Filebeat version, config file and the Logstash config.


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.