I having trouble with some inputs from filebeats.
Original I was receiving inputs from tree differents sources in three different ports (5044, 5045, and 5046), each source in one port.
Today, we had add 6 more servers to the port 5045. Everything works fine, but after 5 minutes there aren't more inputs from the filebeats agents that use the 5045 and 5046 ports.
At first I saw on the log file a lot of this entry [Could not retrieve remote IP address for beats input]. I have found to two solutions for this. One was to upgrade to 6.2 version, and the other was to comment some lines in this file "message_listener.rb". I did the second option. That log entry dissappear. And there isn't any other error or warning in the log. But the same behaivor still happening. I started the logstash process, and after 5 minutes the inputs from the ports 5045 and 5046 stop.
Maybe is some tunning to logstash, I don't know.
Hope that anyone could give me push to fix this.