# Filebeat Log

**URL:** https://discuss.elastic.co/t/filebeat-log/140556
**Category:** Beats
**Tags:** filebeat
**Created:** [July 18, 2018, 12:52pm UTC](https://discuss.elastic.co/t/filebeat-log/140556 "2018-07-18T12:52:47Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![amritesh\_mishra](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/amritesh_mishra/32/50251_2.png) [@amritesh\_mishra](https://discuss.elastic.co/u/amritesh_mishra)
#### Post date: [July 18, 2018, 12:52pm UTC](https://discuss.elastic.co/t/filebeat-log/140556/1 "2018-07-18T12:52:47Z")

</div>

When i am sending the log data to logstash the data was not going to logstash and in file beat we got this error.

2018-07-18T12:56:30.482+0100 INFO [monitoring] log/log.go:124 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":140,"time":142},"total":{"ticks":2050,"time":2059,"value":2050},  
"user":{"ticks":1910,"time":1917}},"info":{"ephemeral\_id":"7c45d1c7-7e33-483f-8241-7557b8c48fb9","uptime":{"ms":240011}},"memstats":{"gc\_next":22721136,"memory\_alloc":17744776,"memory\_total":155118128,"rss":876544}},"filebeat":{"harveste  
r":{"open\_files":1,"running":1}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"batches":3,"failed":4267,"total":4267},"read":{"errors":1},"write":{"bytes":618996}},"pipeline":{"clients":1,"events":{"active":4117,"retr  
y":9491}}},"registrar":{"states":{"current":6}},"system":{"load":{"1":0.34,"15":0.33,"5":0.38,"norm":{"1":0.0425,"15":0.0413,"5":0.0475}}}}}}  
2018-07-18T12:56:32.861+0100 ERROR pipeline/output.go:74 Failed to connect: dial tcp _ **.**._.**:\*\*\*\*: getsockopt: connection refused  
2018-07-18T12:56:40.862+0100 ERROR pipeline/output.go:74 Failed to connect: dial tcp _.._. **:** : getsockopt: connection refused  
2018-07-18T12:56:56.864+0100 ERROR pipeline/output.go:74 Failed to connect: dial tcp _.._.\*\*:**: getsockopt: connection refused  
2018-07-18T12:56:58.822+0100 ERROR logstash/async.go:235 Failed to publish events caused by: read tcp 172.18.57.11:52866-\>_ **.**._.**:\*\*\*\*: read: connection reset by peer  
2018-07-18T12:56:58.822+0100 ERROR logstash/async.go:235 Failed to publish events caused by: read tcp 172.18.57.11:52866- _.._.**:\*\*\*\*: read: connection reset by peer  
2018-07-18T12:56:58.911+0100 ERROR logstash/async.go:235 Failed to publish events caused by: client is not connected  
2018-07-18T12:56:59.911+0100 ERROR pipeline/output.go:92 Failed to publish events: client is not connected

- ---Mark for the ip and port.

---

<div class="post-metadata">

### Author: ![Andrew\_Cholakian1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrew_cholakian1/32/3612_2.png) [@Andrew\_Cholakian1](https://discuss.elastic.co/u/Andrew_Cholakian1)
#### Post date: [July 18, 2018, 10:44pm UTC](https://discuss.elastic.co/t/filebeat-log/140556/2 "2018-07-18T22:44:21Z")

</div>

That indicates that filebeat cannot connect to Logstash.

Have you configured Logstash to listen on a port that filebeat can access? Is there perhaps a firewall rule preventing filebeat from connecting?

---

<div class="post-metadata">

### Author: ![amritesh\_mishra](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/amritesh_mishra/32/50251_2.png) [@amritesh\_mishra](https://discuss.elastic.co/u/amritesh_mishra)
#### Post date: [July 19, 2018, 11:32am UTC](https://discuss.elastic.co/t/filebeat-log/140556/3 "2018-07-19T11:32:53Z")

</div>

yah it is connecting for sometime and loading but after that this error is coming

---

<div class="post-metadata">

### Author: ![Andrew\_Cholakian1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrew_cholakian1/32/3612_2.png) [@Andrew\_Cholakian1](https://discuss.elastic.co/u/Andrew_Cholakian1)
#### Post date: [July 19, 2018, 4:01pm UTC](https://discuss.elastic.co/t/filebeat-log/140556/4 "2018-07-19T16:01:52Z")

</div>

So, does it work some of the time, but not all of the time?

---

<div class="post-metadata">

### Author: ![amritesh\_mishra](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/amritesh_mishra/32/50251_2.png) [@amritesh\_mishra](https://discuss.elastic.co/u/amritesh_mishra)
#### Post date: [July 23, 2018, 9:27am UTC](https://discuss.elastic.co/t/filebeat-log/140556/5 "2018-07-23T09:27:13Z")

</div>

yes it works some time and some time it gets stopped.

---

<div class="post-metadata">

### Author: ![amritesh\_mishra](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/amritesh_mishra/32/50251_2.png) [@amritesh\_mishra](https://discuss.elastic.co/u/amritesh_mishra)
#### Post date: [July 24, 2018, 8:59am UTC](https://discuss.elastic.co/t/filebeat-log/140556/6 "2018-07-24T08:59:46Z")

</div>

Can some one help me on this

---

<div class="post-metadata">

### Author: ![amritesh\_mishra](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/amritesh_mishra/32/50251_2.png) [@amritesh\_mishra](https://discuss.elastic.co/u/amritesh_mishra)
#### Post date: [July 25, 2018, 6:47am UTC](https://discuss.elastic.co/t/filebeat-log/140556/7 "2018-07-25T06:47:12Z")

</div>

It is working for 10 min and the logs are pushed to logstash also but after 10 min it is getting stopped.  
And after 10 min it is giving connection error as i have shared the logs you can see there.

Can someone help on this we are facing issue to send the logs .

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 22, 2018, 6:47am UTC](https://discuss.elastic.co/t/filebeat-log/140556/8 "2018-08-22T06:47:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
