# Error sending logs with filebeat

**URL:** <https://discuss.elastic.co/t/error-sending-logs-with-filebeat/45013>\
**Category:** Beats\
**Created:** [March 21, 2016, 4:03pm UTC](https://discuss.elastic.co/t/error-sending-logs-with-filebeat/45013 "2016-03-21T16:03:54Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![marcmga](https://avatars.discourse-cdn.com/v4/letter/m/3bc359/32.png) [@marcmga](https://discuss.elastic.co/u/marcmga)\
**Post date:** [March 21, 2016, 4:03pm UTC](https://discuss.elastic.co/t/error-sending-logs-with-filebeat/45013/1 "2016-03-21T16:03:54Z")

</div>

Hello,

Suddently my logstash server has stopped receiving logs from filebeat (whatever the server was, not just one but all).  
I think that the problem started when i had problems with my itnernet connection (where logstash server is placed).  
It refused all connections from all servers.

Since then i don't receive logs from filebeat.

If i debug filebeat, it shows this:

```
2016/03/21 15:57:33.443842 prospector.go:259: DBG Check file for harvesting: /opt/tomcat/logs/tomcat.2016-03-21.log
2016/03/21 15:57:33.443858 prospector.go:382: DBG Update existing file for harvesting: /opt/tomcat/logs/tomcat.2016-03-21.log
2016/03/21 15:57:33.443869 prospector.go:425: DBG Not harvesting, file didn't change: /opt/tomcat/logs/tomcat.2016-03-21.log
2016/03/21 15:57:53.291464 spooler.go:97: DBG Flushing spooler because of timeout. Events flushed: 0
2016/03/21 15:57:58.311283 reader.go:138: DBG End of file reached: /opt/tomcat/logs/tomcat.2016-03-21.log; Backoff now.

```

If i create a new file, it show like it wants to send the log but it can't.

```
2016/03/21 15:57:51.426776 client.go:90: DBG connect
2016/03/21 15:57:51.450801 single.go:126: INFO Connecting error publishing events (retrying): dial tcp myip:5044: getsockopt: connection refused
2016/03/21 15:57:51.450815 single.go:152: INFO send fail
2016/03/21 15:57:51.450824 single.go:159: INFO backoff retry: 1m0s
2016/03/21 15:57:53.291464 spooler.go:97: DBG Flushing spooler because of timeout. Events flushed: 0
2016/03/21 15:57:55.435732 reader.go:138: DBG End of file reached: /opt/tomcat/logs/tomcat.test.log; Backoff now.

```

so 2 questions:  
-why is filebeat not detecting changes in logs? can i "reset" filebeat?it seems like it has something in memory.  
-Is it showing that the connection is not working, but it is...any aidea?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [March 21, 2016, 6:21pm UTC](https://discuss.elastic.co/t/error-sending-logs-with-filebeat/45013/2 "2016-03-21T18:21:23Z")

</div>

> 2016/03/21 15:57:51.450801 single.go:126: INFO Connecting error publishing events (retrying): dial tcp myip:5044: getsockopt: connection refused

Whatever network problem you had doesn't seem to be fixed.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 9:54pm UTC](https://discuss.elastic.co/t/error-sending-logs-with-filebeat/45013/3 "2017-07-05T21:54:23Z")

</div>