Geoip in logstash filter makes filebeat pods stop running (0/1: running) after approximately 24 hours

Elastic Stack Beats
1

Hello everyone,

I am using filebeat and send the logs to logstash, and in logstash i am using plugin 'geoip' like this:

geoip {
  source => "source.ip"
  target => "[source][geo]"
}
geoip {
  default_database_type => "ASN"
  source => "source.ip"
  target => "[source][as]"
}

After deploy it, it works fine but after approximately 24 hours the pods of filebeat stop sending logs to logstash and gives me timeout, and its state become running 0/1.

When i restart logstash again, everything works fine for 24 hours, and problem appears again.

How i can solve this issue ?

Thanks

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.