# Error Messages in Logstash Logfile io.netty.channel

**URL:** <https://discuss.elastic.co/t/error-messages-in-logstash-logfile-io-netty-channel/248660>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [September 15, 2020, 10:51am UTC](https://discuss.elastic.co/t/error-messages-in-logstash-logfile-io-netty-channel/248660 "2020-09-15T10:51:30Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![bateskevin](https://avatars.discourse-cdn.com/v4/letter/b/ba9def/32.png) [@bateskevin](https://discuss.elastic.co/u/bateskevin)\
**Post date:** [September 15, 2020, 10:51am UTC](https://discuss.elastic.co/t/error-messages-in-logstash-logfile-io-netty-channel/248660/1 "2020-09-15T10:51:30Z")

</div>

Hi,

I am recieving the following errors in my logstash log file on the instance on a regular basis:

```auto
[2020-09-15T02:00:17,587][WARN][io.netty.channel.DefaultChannelPipeline][main][localinstance] An exceptionCaught() event was fired, and it reached at the tail of the pipeline. It usually means the last handler in the pipeline did not handle the exception.
java.io.IOException: Connection reset by peer
        at sun.nio.ch.FileDispatcherImpl.read0(Native Method) ~[?:1.8.0_262]
        at sun.nio.ch.SocketDispatcher.read(SocketDispatcher.java:39) ~[?:1.8.0_262]
        at sun.nio.ch.IOUtil.readIntoNativeBuffer(IOUtil.java:223) ~[?:1.8.0_262]
        at sun.nio.ch.IOUtil.read(IOUtil.java:192) ~[?:1.8.0_262]
        at sun.nio.ch.SocketChannelImpl.read(SocketChannelImpl.java:377) ~[?:1.8.0_262]
        at io.netty.buffer.PooledByteBuf.setBytes(PooledByteBuf.java:253) ~[netty-all-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.buffer.AbstractByteBuf.writeBytes(AbstractByteBuf.java:1133) ~[netty-all-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.socket.nio.NioSocketChannel.doReadBytes(NioSocketChannel.java:350) ~[netty-all-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:148) ~[netty-all-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:714) ~[netty-all-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:650) ~[netty-all-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:576) ~[netty-all-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:493) [netty-all-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:989) [netty-all-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-all-4.1.49.Final.jar:4.1.49.Final]
        at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) [netty-all-4.1.49.Final.jar:4.1.49.Final]
        at java.lang.Thread.run(Thread.java:748) [?:1.8.0_262]

```

What causes these Error Messages?

Kind Regards,  
Kevin

---

<div class="post-metadata">

**Author:** ![mtojek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mtojek/32/63863_2.png) [@mtojek](https://discuss.elastic.co/u/mtojek)\
**Post date:** [September 15, 2020, 11:29am UTC](https://discuss.elastic.co/t/error-messages-in-logstash-logfile-io-netty-channel/248660/2 "2020-09-15T11:29:30Z")

</div>

Are you running your software in the cloud? It looks like a transient network issue.

---

<div class="post-metadata">

**Author:** ![bateskevin](https://avatars.discourse-cdn.com/v4/letter/b/ba9def/32.png) [@bateskevin](https://discuss.elastic.co/u/bateskevin)\
**Post date:** [September 15, 2020, 11:41am UTC](https://discuss.elastic.co/t/error-messages-in-logstash-logfile-io-netty-channel/248660/3 "2020-09-15T11:41:23Z")

</div>

Hi Marcin,

Thanks for your answer!

No, everything is run on premise. I have read online, that it could be an ssl issue, but we actually have SSL enabled on both ends. Winlogbeat Config on the Clients and on the Logstash Instance.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 13, 2020, 1:41pm UTC](https://discuss.elastic.co/t/error-messages-in-logstash-logfile-io-netty-channel/248660/4 "2020-10-13T13:41:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.