Unable to Process VPC Flow Logs using filebeat 7.8.0

nikhilv · July 22, 2020, 3:54pm

Hello Team,

I'm using filebeat 8.0 and deployed on AWS EKS to ship aws logs to ECK for analysis. I'm using AWS module in filebeat and i didn't face any issues with cloudtrail&elb logs but only facing issues with vpc flowlogs. I'm geeting error like "context deadline exceed", i have increased visibility time out to 45 min but still getting same error. Please help me on this.

nikhilv · July 25, 2020, 1:47pm

Sorry I'm using file beat 7.8.0 version.

mtojek · July 27, 2020, 8:58am

You need to provide a more detailed error. Did you configure properly network permissions? Are ES endpoints accessible?

nikhilv · July 28, 2020, 1:52pm

Hey Mtojek,

Issue got resolved, i'm able to view all the logs now.

Thanks.

mtojek · July 28, 2020, 3:08pm

It would be cool to post a solution though I'm glad you solved your issue.

system · August 25, 2020, 5:08pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.