ERR Connecting error publishing events (retrying) - help me

Elastic Stack Beats
1

HI.
I am getting these error messages and I have the most basic configuration of Logstash/FileBeat.

error

ERR Connecting error publishing events (retrying): Get http://172.30.17.118:5044: read tcp 172.30.17.118:59086->172.30.17.118:5044: wsarecv: An existing connection was forcibly closed by the remote host.

filebeat.yml
filebeat.prospectors:

- input_type: log

  # Paths that should be crawled and fetched. Glob based paths.
  paths:
    - F:\Project\logs\*
  document_type: log

output.elasticsearch:
hosts: ["172.30.17.118:5044"]

#config.conf
input
{
beats
{
port => "5044"
}
}

output {
	if [type] == "log" {
		elasticsearch {
			index => "logstash-log-%{+YYYY.MM}"
			hosts => ["172.30.17.118:9200"]
		}
	}
}

logstash
http.host: "172.30.17.118"

2

you configured the elasticsearch output in filebeat.yml (also check indentation being correct, looks off).

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.