I am putting in filebeats 3 types of logs:
2 raw logs (not jsons) and it reads it perfectly.
Then when I put in a log (Json type) I get:
ERR Failed to publish events caused by: write tcp 10.0.0.1:40716->10.0.0.2:5044: write: connection reset by peer
In the past filebeats did read this log perfectly.
From when it worked to now I:
played with mutate on a certain feild inside this log in logstash, but I erased all the filter section in logstash and restarted!
erased all filebeat index's until now
Any help will be great!