Filebeat Error: ERR Failed to publish events caused by: read tcp i/o timeout

Elastic Stack Beats
1

Hello

I recently upgraded to filebeat v5 (and the rest of the ELK components). However, I am now seeing the following error on filebeat when shipping the logs across:

2016-12-05T10:42:05Z ERR Failed to publish events caused by: read tcp 172.30.168.235:60542->172.30.168.244:5044: i/o timeout

Anyone else see this before?

Thanks!

2

which logstash version have you installed? Which input beats plugin?

3

@jinal.shah Have a look at the search results here: https://discuss.elastic.co/search?q=ERR%20Failed%20to%20publish%20events%20caused%20by%3A%20read%20tcp Several solutions have been discussed in the past.

4

Thanks @ruflin - Added bulk_max_size: 1024

That fixed the issue for me :slight_smile:

2 Likes
5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.