Unable to Process VPC Flow Logs using filebeat 7.8.0

Elastic Stack Beats
,
1

Hello Team,

I'm using filebeat 8.0 and deployed on AWS EKS to ship aws logs to ECK for analysis. I'm using AWS module in filebeat and i didn't face any issues with cloudtrail&elb logs but only facing issues with vpc flowlogs. I'm geeting error like "context deadline exceed", i have increased visibility time out to 45 min but still getting same error. Please help me on this.

2

Sorry I'm using file beat 7.8.0 version.

3

You need to provide a more detailed error. Did you configure properly network permissions? Are ES endpoints accessible?

4

Hey Mtojek,

Issue got resolved, i'm able to view all the logs now.

Thanks.

5

It would be cool to post a solution though :wink: I'm glad you solved your issue.

1 Like
6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.