ERR Failed to publish events caused by: write tcp 10.0.0.1:40716->10.0.0.2:5044: write: connection reset by peer only with one type of log

Elastic Stack Beats
1

Hi,

I am putting in filebeats 3 types of logs:
2 raw logs (not jsons) and it reads it perfectly.
Then when I put in a log (Json type) I get: ERR Failed to publish events caused by: write tcp 10.0.0.1:40716->10.0.0.2:5044: write: connection reset by peer

In the past filebeats did read this log perfectly.

From when it worked to now I:

played with mutate on a certain feild inside this log in logstash, but I erased all the filter section in logstash and restarted!
erased all filebeat index's until now

Any help will be great!

2
  • Can you share your LS config?
  • Can you share some LS logs?
  • Which versions of both are you using?
3

This topic was automatically closed after 21 days. New replies are no longer allowed.