# Filebeat: failed FilterLogEventsRequestRequestCanceled

**URL:** <https://discuss.elastic.co/t/filebeat-failed-filterlogeventsrequestrequestcanceled/266097>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 3, 2021, 12:04pm UTC](https://discuss.elastic.co/t/filebeat-failed-filterlogeventsrequestrequestcanceled/266097 "2021-03-03T12:04:01Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![vishwas\_rajput](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vishwas_rajput/32/84879_2.png) [@vishwas\_rajput](https://discuss.elastic.co/u/vishwas_rajput)\
**Post date:** [March 3, 2021, 12:04pm UTC](https://discuss.elastic.co/t/filebeat-failed-filterlogeventsrequestrequestcanceled/266097/1 "2021-03-03T12:04:01Z")

</div>

Hi,  
I am using Filebeat 7.11.1 to fetch CloudWatch logs using given configuration

```auto
    filebeat.inputs:
    - type: aws-cloudwatch
          log_group_arn: arn:aws:logs:XXX:XXX:*
          log_group_name: /aws/
          region_name: xxxx
          log_stream_prefix: xxxx
          scan_frequency: 1m 
          credential_profile_name: xxxx          
          start_position: beginning

```

From logs I can see that it is connecting to CloudWatch and worker also started but after few seconds it throws

```auto
ERROR [aws-cloudwatch] awscloudwatch/input.go:201 failed FilterLogEventsRequestRequestCanceled: request context canceled
caused by: context deadline exceeded

```

---

<div class="post-metadata">

**Author:** ![mtojek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mtojek/32/63863_2.png) [@mtojek](https://discuss.elastic.co/u/mtojek)\
**Post date:** [March 4, 2021, 9:36am UTC](https://discuss.elastic.co/t/filebeat-failed-filterlogeventsrequestrequestcanceled/266097/2 "2021-03-04T09:36:42Z")

</div>

It looks rather like a network connectivity issue. Did you check if you can reach out the cloudwatch endpoint?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 1, 2021, 11:37am UTC](https://discuss.elastic.co/t/filebeat-failed-filterlogeventsrequestrequestcanceled/266097/3 "2021-04-01T11:37:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.