Error publishing events from filebeat

[aparadka (Akash Paradkar)]

This is the error i'm encountering while sending the file from FB-->LS-->ES.

This is what the LS console is showing

[ruflin]

Is this a new question or the same as posted here? Filebeat unable to send data to elastic search As mentioned there, please post logs as text or link a gist.

Also please always add details on what versions you are using and what your setup is.

[aparadka (Akash Paradkar)]

version used is 5.0.1 and the error is Connecting error publishing events (retrying) :dial tcp 127.0.0.1:5044 connnectex: no connection could be made because the target machine actively refused it.
This is what it shows on the filebeat side.

And on the logstash side the error is Got a bad response code from server, but this code is not considered retryable. The request will be dropped (:code=>403)

[tudor (Tudor Golubenco)]

The Logstash logs seem to indicate that you are using the TCP input? You should use the Beats input with Filebeat. If you are using the beats input, please post your LS config.

[aparadka (Akash Paradkar)]

I'm using beats input in the ls config with filebeat.
Here is my conf file for LS

input {
beats {
host => "localhost"
port => 5044
codec => plain { charset => "ISO-8859-1" }

}
}

output {
elasticsearch {
hosts => "http://127.0.0.1:9200"
manage_template => false
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
user => logstash_internal
password => changeme
}
}

[steffens (Steffen Siering)]

looks like you're having two problems. The 403 from LS to ES.

For beats to LS the connection is not accepted by LS. Maybe LS is blocked due to pipeline/output not working correctly.

[aparadka (Akash Paradkar)]

I solved this issue.. Thank you all!!

[Josh_A]

Akash - how did you solve it?