This is the error i'm encountering while sending the file from FB-->LS-->ES.
This is what the LS console is showing
Is this a new question or the same as posted here? Filebeat unable to send data to elastic search As mentioned there, please post logs as text or link a gist.
Also please always add details on what versions you are using and what your setup is.
version used is 5.0.1 and the error is Connecting error publishing events (retrying) :dial tcp 127.0.0.1:5044 connnectex: no connection could be made because the target machine actively refused it.
This is what it shows on the filebeat side.
And on the logstash side the error is Got a bad response code from server, but this code is not considered retryable. The request will be dropped (:code=>403)
The Logstash logs seem to indicate that you are using the TCP input? You should use the Beats input with Filebeat. If you are using the beats input, please post your LS config.
I'm using beats input in the ls config with filebeat.
Here is my conf file for LS
input {
beats {
host => "localhost"
port => 5044
codec => plain { charset => "ISO-8859-1" }
}
}
output {
elasticsearch {
hosts => "http://127.0.0.1:9200"
manage_template => false
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
user => logstash_internal
password => changeme
}
}
looks like you're having two problems. The 403 from LS to ES.
For beats to LS the connection is not accepted by LS. Maybe LS is blocked due to pipeline/output not working correctly.
I solved this issue.. Thank you all!!
Akash - how did you solve it?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.