# Filebeat error- Failed to publish events caused by: lumberjack protocol error

**URL:** <https://discuss.elastic.co/t/filebeat-error-failed-to-publish-events-caused-by-lumberjack-protocol-error/282791>\
**Category:** Logstash\
**Created:** [August 30, 2021, 9:26am UTC](https://discuss.elastic.co/t/filebeat-error-failed-to-publish-events-caused-by-lumberjack-protocol-error/282791 "2021-08-30T09:26:08Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ankit-github-26](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ankit-github-26/32/66756_2.png) [@Ankit-github-26](https://discuss.elastic.co/u/Ankit-github-26)\
**Post date:** [August 30, 2021, 9:26am UTC](https://discuss.elastic.co/t/filebeat-error-failed-to-publish-events-caused-by-lumberjack-protocol-error/282791/1 "2021-08-30T09:26:08Z")

</div>

Filebeat gives following error-

2021-08-30T08:59:03.490Z INFO [publisher\_pipeline\_output] pipeline/output.go:151 Connection to backoff(async(tcp://localhost:5044)) established  
2021-08-30T08:59:03.565Z ERROR [logstash] logstash/async.go:280 Failed to publish events caused by: lumberjack protocol error  
2021-08-30T08:59:03.565Z INFO [publisher] pipeline/retry.go:219 retryer: send unwait signal to consumer  
2021-08-30T08:59:03.565Z INFO [publisher] pipeline/retry.go:223 done  
2021-08-30T08:59:03.659Z ERROR [logstash] logstash/async.go:280 Failed to publish events caused by: client is not connected  
2021-08-30T08:59:03.659Z INFO [publisher] pipeline/retry.go:219 retryer: send unwait signal to consumer  
2021-08-30T08:59:03.659Z INFO [publisher] pipeline/retry.go:223 done  
^C2021-08-30T08:59:05.557Z ERROR [publisher\_pipeline\_output] pipeline/output.go:180 failed to publish events: client is not connected  
2021-08-30T08:59:05.558Z INFO [publisher\_pipeline\_output] pipeline/output.go:143 Connecting to backoff(async(tcp://localhost:5044))  
2021-08-30T08:59:05.558Z INFO [publisher] pipeline/retry.go:219 retryer: send unwait signal to consumer  
2021-08-30T08:59:05.558Z INFO [publisher] pipeline/retry.go:223 done  
2021-08-30T08:59:05.558Z INFO [publisher\_pipeline\_output] pipeline/output.go:151 Connection to backoff(async(tcp://localhost:5044)) established  
2021-08-30T08:59:05.633Z INFO [publisher] pipeline/retry.go:219 retryer: send unwait signal to consumer  
2021-08-30T08:59:05.633Z ERROR [logstash] logstash/async.go:280 Failed to publish events caused by: lumberjack protocol error  
2021-08-30T08:59:05.633Z INFO [publisher] pipeline/retry.go:223 done  
2021-08-30T08:59:05.693Z ERROR [logstash] logstash/async.go:280 Failed to publish events caused by: client is not connected  
2021-08-30T08:59:05.693Z INFO [publisher] pipeline/retry.go:219 retryer: send unwait signal to consumer  
2021-08-30T08:59:05.693Z INFO [publisher] pipeline/retry.go:223 done

* * *

Filebeat output configuration

output.logstash:

# The Logstash hosts

## hosts: ["localhost:5044"]

my logstash is in active state and running on port 5044.  
at starting it was working fine but after stop and start filebeat service it started show above error.  
please help me on this

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 27, 2021, 9:26am UTC](https://discuss.elastic.co/t/filebeat-error-failed-to-publish-events-caused-by-lumberjack-protocol-error/282791/2 "2021-09-27T09:26:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.