Issues with packetbeat

Elastic Stack Beats
1

Hi there!

I've been testing out packetbeat as a hobby and I have a couple issues.

First, one where packetbeat won't start:

Fail to set the IP addresses: ERR command not allowed when used memory > 'maxmemory'
/usr/bin/packetbeat[9456]: main.go:146: ERR command not allowed when used memory > 'maxmemory'

Also, I had an issue that unfortunately I don't have the logs for now but basically packetbeat was producing a ton of max connections error in syslog (reading proc filesystem).

Any ideas on how to tune packetbeat?

2

What version, what OS?

3

Hi, the "command not allowed when..." error is coming from Redis, who looks like it is out of memory. It sounds to me like Packetbeat is inserting into the Redis list, but no one is reading from there. Likely logstash is down or misconfigured. This might also be the root cause for the second error about max connections.