hi team , installed in ELK ( Elasticsearch , logstash , kibana and filebeat ) in same server
unable to connect from filebeat to logstash , getting error below
{"log.level":"error","timestamp":"2024-01-11T17:49:55.606+0530","log.logger":"publisher_pipeline_output","log.origin":{"file.name":"pipeline/client_worker.go","file.line":148},"message":"Failed to connect to backoff(async(tcp://127.0.0.1:5044)): read tcp 127.0.0.1:13860->127.0.0.1:5044: read: connection reset by peer","service.name":"filebeat","ecs.version":"1.6.0"}
filbeat.yml
filebeat.inputs:
- type: log
enabled: true
paths:- /var/log/varnish/varnishncsa.lstat
scan_frequency: 2s
tail_files: false
backoff: 0.5s
max_backoff: 1s
tags: ['iad1']
exclude_lines: [ 'PURGE', 'healthcheck.txt', '- - -' ]
output.logstash:
hosts: ["127.0.0.1:5044"]
loadbalance: true
pipelining: 0
ttl: 300s
ssl.certificate_authorities: ["/etc/filebeat/ca.crt"]
logging:
level: info
to_files: true
to_syslog: false
logstash file :
input {
beats {
port => 5044
}
}
output {
elasticsearch {
hosts => [" http://localhost:9200"]
index => "%{[@ metadata][beat]}-%{[@ metadata][version]}"
}
}
all services are running fine , even firewall also allowed
i was trying since 3 days to resolve this iissue , if u solve this issue, u will get reward
- /var/log/varnish/varnishncsa.lstat