# ERR Failed to publish events caused by: write tcp - wsasend: An existing connection was forcibly closed by the remote host
**URL:** https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-write-tcp-wsasend-an-existing-connection-was-forcibly-closed-by-the-remote-host/268321
**Category:** Beats
**Tags:** filebeat
**Created:** [March 25, 2021, 10:47am UTC](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-write-tcp-wsasend-an-existing-connection-was-forcibly-closed-by-the-remote-host/268321 "2021-03-25T10:47:59Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@My\_Google\_Account](https://discuss.elastic.co/u/My_Google_Account)
#### Post date: [March 25, 2021, 10:47am UTC](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-write-tcp-wsasend-an-existing-connection-was-forcibly-closed-by-the-remote-host/268321/1 "2021-03-25T10:47:59Z")
good afternoon! logstash version is 5.6.2, filebeat for windows version is 5.1.1, i have a problem with one of our filebeat agents and see in filebeat log file this:
ERR Failed to publish events caused by: write tcp - wsasend: An existing connection was forcibly closed by the remote host
which side is problem i can't understand, other filebeat agents at another servers works fine with same config, all the firewalls setup correctly. Please help!
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 22, 2021, 12:48pm UTC](https://discuss.elastic.co/t/err-failed-to-publish-events-caused-by-write-tcp-wsasend-an-existing-connection-was-forcibly-closed-by-the-remote-host/268321/2 "2021-04-22T12:48:41Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.