Error installing beats input plugin

Elastic Stack Beats
1

Hi ,

I am trying to install logstash input beats plugin , I am getting the following error:

File /opt/logstash/Gemfile does not exist or is writable, aborting

I ran the command:
/opt/logstash$ ./bin/logstash-plugin install logstash-input-beats

Could any one help with this ?
Thanks!

2

The plugin comes pre-installed with Logstash. Why are you manually installing it?

3

Thanks Andrew for your reply!

I am getting this error
when I run:
./filebeat -e -v -c filebeat.yml

2017/07/27 18:49:14.383197 beat.go:285: INFO Home path: [/home/dotisandhyarani/.local/share/Trash/files/filebeat-5.5.1-linux-x86_64] Config path: [/home/dotisandhyarani/.local/share/Trash/files/filebeat-5.5.1-linux-x86_64] Data path: [/home/dotisandhyarani/.local/share/Trash/files/filebeat-5.5.1-linux-x86_64/data] Logs path: [/home/dotisandhyarani/.local/share/Trash/files/filebeat-5.5.1-linux-x86_64/logs]
2017/07/27 18:49:14.383235 beat.go:186: INFO Setup Beat: filebeat; Version: 5.5.1
2017/07/27 18:49:14.383282 metrics.go:23: INFO Metrics logging every 30s
2017/07/27 18:49:14.383322 logstash.go:90: INFO Max Retries set to: 3
2017/07/27 18:49:14.383379 outputs.go:108: INFO Activated logstash as output plugin.
2017/07/27 18:49:14.383484 publish.go:295: INFO Publisher name: sdoti-OptiPlex-9010
2017/07/27 18:49:14.383715 async.go:63: INFO Flush Interval set to: 1s
2017/07/27 18:49:14.383735 async.go:64: INFO Max Bulk Size set to: 2048
2017/07/27 18:49:14.384130 beat.go:221: INFO filebeat start running.
2017/07/27 18:49:14.384195 registrar.go:85: INFO Registry file set to: /home/dotisandhyarani/.local/share/Trash/files/filebeat-5.5.1-linux-x86_64/data/registry
2017/07/27 18:49:14.384246 registrar.go:106: INFO Loading registrar data from /home/dotisandhyarani/.local/share/Trash/files/filebeat-5.5.1-linux-x86_64/data/registry
2017/07/27 18:49:14.384807 registrar.go:123: INFO States Loaded from registrar: 10
2017/07/27 18:49:14.384871 crawler.go:38: INFO Loading Prospectors: 1
2017/07/27 18:49:14.384890 registrar.go:236: INFO Starting Registrar
2017/07/27 18:49:14.384978 sync.go:41: INFO Start sending events to output
2017/07/27 18:49:14.385018 spooler.go:63: INFO Starting spooler: spool_size: 2048; idle_timeout: 5s
2017/07/27 18:49:14.385033 prospector_log.go:65: INFO Prospector with previous states loaded: 0
2017/07/27 18:49:14.385200 prospector.go:124: INFO Starting prospector of type: log; id: 15345013899043771739 
2017/07/27 18:49:14.385230 crawler.go:58: INFO Loading and starting Prospectors completed. Enabled prospectors: 1
2017/07/27 18:49:14.385729 log.go:91: INFO Harvester started for file: /home/dotisandhyarani/Downloads/logstash-5.4.1/bin/test_m8.log
2017/07/27 18:49:14.385772 log.go:91: INFO Harvester started for file: /home/dotisandhyarani/Downloads/logstash-5.4.1/bin/test_small.log
2017/07/27 18:49:14.385877 log.go:91: INFO Harvester started for file: /home/dotisandhyarani/Downloads/logstash-5.4.1/bin/test_exceptions.log
2017/07/27 18:49:14.385892 log.go:91: INFO Harvester started for file: /home/dotisandhyarani/Downloads/logstash-5.4.1/bin/dmc_server1.log
2017/07/27 18:49:14.417999 single.go:140: ERR Connecting error publishing events (retrying): dial tcp 127.0.0.1:5044: getsockopt: connection refused
2017/07/27 18:49:15.418421 single.go:140: ERR Connecting error publishing events (retrying): dial tcp 127.0.0.1:5044: getsockopt: connection refused
2017/07/27 18:49:17.418840 single.go:140: ERR Connecting error publishing events (retrying): dial tcp 127.0.0.1:5044: getsockopt: connection refused
2017/07/27 18:49:21.419246 single.go:140: ERR Connecting error publishing events (retrying): dial tcp 127.0.0.1:5044: getsockopt: connection refused
2017/07/27 18:49:29.419686 single.go:140: ERR Connecting error publishing events (retrying): dial tcp 127.0.0.1:5044: getsockopt: connection refused
2017/07/27 18:49:44.383565 metrics.go:39: INFO Non-zero metrics in the last 30s: filebeat.harvester.open_files=4 filebeat.harvester.running=4 filebeat.harvester.started=4 libbeat.publisher.published_events=2044
2017/07/27 18:49:45.420166 single.go:140: ERR Connecting error publishing events (retrying): dial tcp 127.0.0.1:5044: getsockopt: connection refused
2017/07/27 18:50:14.383621 metrics.go:34: INFO No non-zero metrics in the last 30s
2017/07/27 18:50:17.420670 single.go:140: ERR Connecting error publishing events (retrying): dial tcp 127.0.0.1:5044: getsockopt: connection refused

So, I thought this problem (connection refused) is due to beats plugin ,
can I know why I am getting the above error?

Any help?

4

is logstash actually running and reachable on port 5044 (try telnet localhost 5044)? The connection refused indicates no process listening on port 5044.

5

Thanks for your reply.

Yeah the problem is port 5044 was not listening

Now its working fine
I checked using telnet localhost 5044 .

ss
ss.png1085×151 44.4 KB

Thanks!