# FIlebeat timesout connecting to logstash

**URL:** <https://discuss.elastic.co/t/filebeat-timesout-connecting-to-logstash/122118>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 1, 2018, 4:07pm UTC](https://discuss.elastic.co/t/filebeat-timesout-connecting-to-logstash/122118 "2018-03-01T16:07:28Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![zozo6015](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zozo6015/32/12117_2.png) [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Post date:** [March 1, 2018, 4:07pm UTC](https://discuss.elastic.co/t/filebeat-timesout-connecting-to-logstash/122118/1 "2018-03-01T16:07:28Z")

</div>

Hello,

I am running filebeat 6.2.x on ubuntu 14.04 used for gathering logs which should be pushed to logstash. However I keep seing that the filebeat cannot push the logs into the logstash because it is timing out contantly. While I can successfully telnet to the logstash server using the port 5044 which is the port the logstash is listening for connections. It is very strange since I have another cluster runing on 6.1.1 both logstash and filebeat which works great without any issues.

Any suggestion?

Regards,  
Peter

---

<div class="post-metadata">

**Author:** ![asp](https://avatars.discourse-cdn.com/v4/letter/a/9fc348/32.png) [@asp](https://discuss.elastic.co/u/asp)\
**Post date:** [March 1, 2018, 8:32pm UTC](https://discuss.elastic.co/t/filebeat-timesout-connecting-to-logstash/122118/2 "2018-03-01T20:32:09Z")

</div>

do you also have duplicates in logstash or don't you get any data to logstash via filebeat?

I assume I am struggling with a similar issue like you:

> [@Strange filebeat behavior: timeout and duplicate pushing to logstash's beats plugin](https://discuss.elastic.co/t/strange-filebeat-behavior-timeout-and-duplicate-pushing-to-logstashs-beats-plugin/122148):
>
> Hi, During my migration from 5.1.2 / 5.2.0 to 6.1.x / 6.2.1 I encountered some issues. Trying to sharpen the cause of my issues I noticed strange behavior when shipping files from filebeat to logstash. I got reproducible issues when shipping one of our logfiles to logstash 6.2.1. It doesn't matter if I use filebeat 5.6.7 or 6.2.1. Here is my testcase: start logstash start filebeat logfile\_which\_is\_harvested\_by\_filebeat does not exist yet create logfile by cat logfile\_input \> logfile\_which\_i…

---

<div class="post-metadata">

**Author:** ![zozo6015](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zozo6015/32/12117_2.png) [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Post date:** [March 1, 2018, 8:37pm UTC](https://discuss.elastic.co/t/filebeat-timesout-connecting-to-logstash/122118/3 "2018-03-01T20:37:02Z")

</div>

I have configured the logstash so that it logs the output to the syslog and I don't see anything sent. Therefore I am assuming that there is nothing sent to the logstash at all. My logstash API does not respond to any queries so my issue might not be with the filebeat but with logstash.

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [March 6, 2018, 5:16am UTC](https://discuss.elastic.co/t/filebeat-timesout-connecting-to-logstash/122118/4 "2018-03-06T05:16:23Z")

</div>

Could you share your Logstash and Filebeat configs and logs?

---

<div class="post-metadata">

**Author:** ![zozo6015](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zozo6015/32/12117_2.png) [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Post date:** [March 12, 2018, 7:34pm UTC](https://discuss.elastic.co/t/filebeat-timesout-connecting-to-logstash/122118/5 "2018-03-12T19:34:25Z")

</div>

I have fixed it. I was having deadlocks disabled in logstash configurations and later configured deadlock cache which made the filebeat timeout.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 9, 2018, 7:34pm UTC](https://discuss.elastic.co/t/filebeat-timesout-connecting-to-logstash/122118/6 "2018-04-09T19:34:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.