I installed & configured filebeat in host A, logstash in host B. I hope filebeat sending log data to logstash in host B. However, after starting filebeat and logstash, error at filebeat side occurred. Below is the error info:
2016-07-26T10:42:46+08:00 INFO Start sending events to output
2016-07-26T10:42:46+08:00 INFO Connecting error publishing events (retrying): dial tcp 18.104.22.168:5044: getsockopt: connection refused
No error in logstash side.
I found some people posted the same problem in stackoverflow, but nobody answered it. Anyone here know why it happened and how to solve it? Thanks a lot!
By the way, version of filebeat is 1.2.3. version of logstash is 2.1.1
below is part of filebeat configuration, no TLS enabled:
Part of logstash configuration:
hosts => "127.0.0.1"
port => 5044