Hi!
Usually I use standard geoip, but have decided to test ip2location for comparison.
When I add ip2location, my ELK server doesn't receive the log from heavy load nginx server.
Less loaded servers continue to transfer the log
When I remove this plugin - everything is OK
Filebeat log:
ERR Failed to publish events (host: 10.10.10.17:5044:10200), caused by: read tcp 10.2.2.6:10911->10.120.12.117:5044: i/o timeout
2018-03-22T13:26:49Z INFO Error publishing events (retrying): read tcp 10.2.2.6:10911->10.10.10.17:5044: i/o timeout
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.