Hello , I am seeing error -- ERR Failed to publish events caused by: read tcp INFO Error publishing events (retrying): read tcp filebeat.prospectors: - input_type: log # Paths that should be crawled and fetched. Glob based paths. paths: # - /var/log/*.log - /archives/logs/tomcat7-808…

ERR Failed to publish events caused by: read tcp IP:40634->IP:5044: i/o timeout

cazyfunlover June 25, 2017, 4:40pm 7

Thanks Steffens. Looks like my long grok pattern was causing the issue . Modified it and looks like errrors were gone after that

Topic		Replies	Views
Filebeat Error: ERR Failed to publish events caused by: read tcp i/o timeout Beats filebeat	4	14206	January 3, 2017
Filebeat reports :Error publishing events (retrying): read tcp IPA->9IPB5044: i/o timeout, why? Beats	7	2226	July 5, 2017
"Failed to publish events...i/o timeout" (but telnet is OK) Beats filebeat	2	589	October 31, 2019
Filebeat logging - ERROR [logstash] logstash/async.go:280 Failed to publish events caused by: read tcp Beats filebeat	3	1932	April 2, 2021
ERR Failed to publish events caused by: read tcp X.XXXX:55860->XXXXXXX:5044: i/o timeout Logstash	8	2556	August 30, 2018