# Filebeat error in local machine

**URL:** <https://discuss.elastic.co/t/filebeat-error-in-local-machine/80674>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 30, 2017, 12:28pm UTC](https://discuss.elastic.co/t/filebeat-error-in-local-machine/80674 "2017-03-30T12:28:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jonesthomas](https://avatars.discourse-cdn.com/v4/letter/j/f4b2a3/32.png) [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Post date:** [March 30, 2017, 12:28pm UTC](https://discuss.elastic.co/t/filebeat-error-in-local-machine/80674/1 "2017-03-30T12:28:26Z")

</div>

h: [C:\Program Files\Filebeat\data] Logs path: [C:\Program Files\Filebeat\logs]  
2017/03/30 12:25:08.435200 logp.go:219: INFO Metrics logging every 30s  
2017/03/30 12:25:08.435200 beat.go:177: INFO Setup Beat: filebeat; Version: 5.2.2  
2017/03/30 12:25:08.436200 logstash.go:90: INFO Max Retries set to: 3  
2017/03/30 12:25:08.436200 outputs.go:106: INFO Activated logstash as output plugin.  
2017/03/30 12:25:08.436200 publish.go:291: INFO Publisher name: Ellora-PC1  
2017/03/30 12:25:08.439200 async.go:63: INFO Flush Interval set to: 1s  
2017/03/30 12:25:08.439200 async.go:64: INFO Max Bulk Size set to: 1024  
2017/03/30 12:25:08.440200 beat.go:207: INFO filebeat start running.  
2017/03/30 12:25:08.440200 registrar.go:85: INFO Registry file set to: C:\Program Files\Filebeat\data\registry  
2017/03/30 12:25:08.440200 registrar.go:106: INFO Loading registrar data from C:\Program Files\Filebeat\data\registry  
2017/03/30 12:25:08.440200 registrar.go:123: INFO States Loaded from registrar: 0  
2017/03/30 12:25:08.440200 registrar.go:236: INFO Starting Registrar  
2017/03/30 12:25:08.440200 crawler.go:34: INFO Loading Prospectors: 1  
2017/03/30 12:25:08.440200 sync.go:41: INFO Start sending events to output  
2017/03/30 12:25:08.440200 spooler.go:63: INFO Starting spooler: spool\_size: 2048; idle\_timeout: 5s  
2017/03/30 12:25:08.441200 prospector\_log.go:57: INFO Prospector with previous states loaded: 0  
2017/03/30 12:25:08.441200 crawler.go:48: INFO Loading Prospectors completed. Number of prospectors: 1  
2017/03/30 12:25:08.441200 crawler.go:63: INFO All prospectors are initialised and running with 0 states to persist  
2017/03/30 12:25:08.441200 prospector.go:112: INFO Starting prospector of type: log  
2017/03/30 12:25:08.442200 log.go:84: INFO Harvester started for file: C:\Program Files\Filebeat\logs\filebeat  
2017/03/30 12:25:08.443200 log.go:84: INFO Harvester started for file: C:\Program Files\Filebeat\logs\filebeat.1  
2017/03/30 12:25:08.443200 log.go:84: INFO Harvester started for file: C:\Program Files\Filebeat\logs\filebeat.4  
2017/03/30 12:25:08.443200 log.go:84: INFO Harvester started for file: C:\Program Files\Filebeat\logs\filebeat.2  
2017/03/30 12:25:08.443200 log.go:84: INFO Harvester started for file: C:\Program Files\Filebeat\logs\filebeat.5  
2017/03/30 12:25:13.478200 sync.go:85: ERR Failed to publish events caused by: EOF  
2017/03/30 12:25:13.478200 single.go:91: INFO Error publishing events (retrying): EOF  
2017/03/30 12:25:14.513200 sync.go:85: ERR Failed to publish events caused by: EOF  
2017/03/30 12:25:14.514200 single.go:91: INFO Error publishing events (retrying): EOF  
2017/03/30 12:25:16.551200 sync.go:85: ERR Failed to publish events caused by: EOF  
2017/03/30 12:25:16.551200 single.go:91: INFO Error publishing events (retrying): EOF  
2017/03/30 12:25:20.585200 sync.go:85: ERR Failed to publish events caused by: EOF

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [March 31, 2017, 11:55am UTC](https://discuss.elastic.co/t/filebeat-error-in-local-machine/80674/2 "2017-03-31T11:55:32Z")

</div>

Please format logs/configs using the `</>` button, to generate a readable post (and encourage people to answer).

Looks like Logstash (or some network device/firewall) is closing the connection. Which Logstash version are you using?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 28, 2017, 11:55am UTC](https://discuss.elastic.co/t/filebeat-error-in-local-machine/80674/3 "2017-04-28T11:55:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.