Unable configure ELK stack on Single Node

Elastic Stack Logstash
1

Caused by: org.logstash.beats.InvalidFrameProtocolException: Invalid version of beats protocol: 3

-Config :
No xpack secuirty enabled
cd /etc/logstash/conf.d/

output {
elasticsearch {
hosts => ["localhost:9200"]
sniffing => true
manage_template => false
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
}

input {
beats {
port => 5044
}
}
filter {
if [type] == "syslog" {
grok {
match => { "message" => "%{SYSLOGTIMESTAMP:syslog_timestamp} %{SYSLOGHOST:syslog_hostname} %{DATA:syslog_program}(?:[%{POSINT:syslog_pid}])?: %{GREEDYDATA:syslog_message}" }
add_field => [ "received_at", "%{@timestamp}" ]
add_field => [ "received_from", "%{host}" ]
}
syslog_pri { }
date {
match => [ "syslog_timestamp", "MMM d HH:mm:ss", "MMM dd HH:mm:ss" ]
}
}
}

filebeat version 8.15.1
elasticsearch Version: 8.15.2
logstash Version 8.15.2
kibana Version 8.15.2

what could be issue?

2

HI @PJ111288, I would highly recommend if you can format your code so that it will be easy to understand. Few question -

  1. Is it warning or error?
  2. Do you getting any error on filebeat?
  3. Could you just print stdout on your logstash and see if you're receiving proper data?
  4. Hows your filebeat config looks like?