Filebeat stops forwarding logs to Logstash after setting max harvesters

Elastic Stack Beats
1

Due to some resource limitations I have to set maximum number of Filebeat harvesters. But after that change there are no more logs forwarded to Logstash.

Here are some logs from Filebeat

2017/11/22 11:13:56.421773 prospector_log.go:248: ERR Harvester could not be started on new file: /var/audit/service.audit, Err: Harvester limit reached.
2017/11/22 11:14:00.863862 metrics.go:39: INFO Non-zero metrics in the last 30s: filebeat.harvester.skipped=1332

2

Please share you config file and some more complete logs. How many active files is filebeat monitoring (check with lsof).

Please format logs and config files using the </> button or 3 back-ticks.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.