Connecting error publishing events


(Pablo Perez) #1

I´m having similar issue when I try to connect to my logstash

Logstash version 2.0.0
Filebeat 1.0.1

Here the error

INFO Connecting error publishing events (retrying): dial tcp 192.168.50.5:14560: getsockopt: connection refused
This is my logstash configuration

input {
beats {
codec => json
port => 14560
}
}
output {
elasticsearch {hosts=> localhost}
stdout {codec = > rubydebug}
}

I install the filebeat logstash plugin as I read it

./plugin install logstash-input-beats
I´m completely run out of ideas, and I would love to use this framework, but it´s seems not responding at all.
Any ideas would be great.

Regards.


(Christian Dahlqvist) #2

What does your Filebeat configuration look like? Are you able to telnet to the Logstash instance from the node where Filebeat is installed?


(Pablo Perez) #3

Nope I cannot telnet, even on the same machine curl localhost:14560 cannot give me nothing. Or telnet from outside, so first thing that I need to figure out is what's wrong with logstash configuration. Since Upgrade to version 2.0 and I add the input plugin beats I cannot reach logstash. Previously with version 1.4.2 and Input { tcp{port =>14560}} I was able to telnet to localhost:14560. But now not anymore.
The thing is, that when I run logstash he tell me that configuration is fine and if I use beats plugin please report whatever bug that I found, so I guess configuration was fine.

Enviado desde mi iPhone


(Steffen Siering) #5

maybe let's try with the most simple config first:

input {
  beats {
    port => 14560
  }
}
output {
    stdout {codec = > rubydebug}
}

Can you telnet into logstash when using this config? Anything in logstash logs?


(system) #6