ERR Connecting error publishing events (retrying) - help me

HI.
I am getting these error messages and I have the most basic configuration of Logstash/FileBeat.

error

ERR Connecting error publishing events (retrying): Get http://172.30.17.118:5044: read tcp 172.30.17.118:59086->172.30.17.118:5044: wsarecv: An existing connection was forcibly closed by the remote host.

#filebeat.yml
filebeat.prospectors:

- input_type: log

  # Paths that should be crawled and fetched. Glob based paths.
  paths:
    - F:\Project\logs\*
  document_type: log

output.elasticsearch:
hosts: ["172.30.17.118:5044"]

#config.conf
input
{
beats
{
port => "5044"
}
}

output {
	if [type] == "log" {
		elasticsearch {
			index => "logstash-log-%{+YYYY.MM}"
			hosts => ["172.30.17.118:9200"]
		}
	}
}

#logstash
http.host: "172.30.17.118"

you configured the elasticsearch output in filebeat.yml (also check indentation being correct, looks off).

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.