Hello Team,
I have a filebeat configuration on source VM, which is configured to send application logs to eventhub.
It was fine for somedays, suddenly the logs are not shipped to eventhub, and we have checked the filebeat logs to investigate the issue.
{"file.name":"kafka/client.go","file.line":317},"message":"Kafka (topic=eventhub-prd): kafka: client has run out of available brokers to talk to (Is your cluster reachable?)","service.name":"filebeat","ecs.version":"1.6.0"}
Then I have checked the tcpdump on this VM,
tcpdump -i INTERFACE -s0 -n -w /tmp/cap.pcap
after running the tcpdump command for 10 mins, I could see that 0 bytes file size for cap.pcap.
Please help with resolving the issue.
Thanks in advance,
Pavani