We see the following error in filebeat log resulting in loss of data:
pipeline/output.go:121 Failed to publish events: write tcp 22.214.171.124:42660->126.96.36.199:5044: write: connection reset by peer
It seems that filebeat is not able to push messages to the remote Logstash listening on port 5044.
This error is seen on numerous filebeat logs which makes me believe that the issue is on the Logstash side.
Question: What are the tuning parameters required for both Logstash and OS (RHEL 7) as I believe Logstash is getting swamped with messages?