And this output I'm getting in logstash plain log :
[2018-11-23T09:32:42,476][INFO ][org.logstash.beats.BeatsHandler] [local: 0.0.0.0:5044, remote: 10.193.151.30:63155] Handling exception: javax.net.ssl.SSLHandshakeException: error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER
[2018-11-23T09:32:42,476][WARN ][io.netty.channel.DefaultChannelPipeline] An exceptionCaught() event was fired, and it reached at the tail of the pipeline. It usually means the last handler in the pipeline did not handle the exception.
io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER
Those 2 errors look like they problaby have different causes.
It seems that your elasticsearch node isn't actually running.
Check the logs.
This seems to be a problem with Beats connecting to Logstash.
It seems that Beats and Logstash cannot agree on a SSL/TLS version to use. Did something get upgraded recently, or was a config changed?
The only thing that I did, restarted elasticsearch service and this happened. Now, all of sudden this URL gives me positive output : curl -XGET 'http://localhost:9200/filebeat-*/_search?pretty'
Also, there is one more issue where I need your help. Somehow I'm only able to send logs from one client machine. As soon as I add the setup for second client, the first client would stop sending the logs, but second client would send the data.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.