Filebeat error- Failed to publish events caused by: lumberjack protocol error

Filebeat gives following error-

2021-08-30T08:59:03.490Z INFO [publisher_pipeline_output] pipeline/output.go:151 Connection to backoff(async(tcp://localhost:5044)) established
2021-08-30T08:59:03.565Z ERROR [logstash] logstash/async.go:280 Failed to publish events caused by: lumberjack protocol error
2021-08-30T08:59:03.565Z INFO [publisher] pipeline/retry.go:219 retryer: send unwait signal to consumer
2021-08-30T08:59:03.565Z INFO [publisher] pipeline/retry.go:223 done
2021-08-30T08:59:03.659Z ERROR [logstash] logstash/async.go:280 Failed to publish events caused by: client is not connected
2021-08-30T08:59:03.659Z INFO [publisher] pipeline/retry.go:219 retryer: send unwait signal to consumer
2021-08-30T08:59:03.659Z INFO [publisher] pipeline/retry.go:223 done
^C2021-08-30T08:59:05.557Z ERROR [publisher_pipeline_output] pipeline/output.go:180 failed to publish events: client is not connected
2021-08-30T08:59:05.558Z INFO [publisher_pipeline_output] pipeline/output.go:143 Connecting to backoff(async(tcp://localhost:5044))
2021-08-30T08:59:05.558Z INFO [publisher] pipeline/retry.go:219 retryer: send unwait signal to consumer
2021-08-30T08:59:05.558Z INFO [publisher] pipeline/retry.go:223 done
2021-08-30T08:59:05.558Z INFO [publisher_pipeline_output] pipeline/output.go:151 Connection to backoff(async(tcp://localhost:5044)) established
2021-08-30T08:59:05.633Z INFO [publisher] pipeline/retry.go:219 retryer: send unwait signal to consumer
2021-08-30T08:59:05.633Z ERROR [logstash] logstash/async.go:280 Failed to publish events caused by: lumberjack protocol error
2021-08-30T08:59:05.633Z INFO [publisher] pipeline/retry.go:223 done
2021-08-30T08:59:05.693Z ERROR [logstash] logstash/async.go:280 Failed to publish events caused by: client is not connected
2021-08-30T08:59:05.693Z INFO [publisher] pipeline/retry.go:219 retryer: send unwait signal to consumer
2021-08-30T08:59:05.693Z INFO [publisher] pipeline/retry.go:223 done


Filebeat output configuration

output.logstash:

The Logstash hosts

hosts: ["localhost:5044"]

my logstash is in active state and running on port 5044.
at starting it was working fine but after stop and start filebeat service it started show above error.
please help me on this

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.