# Unable to read logs from filebeat and post it to logstash via pipeline

**URL:** <https://discuss.elastic.co/t/unable-to-read-logs-from-filebeat-and-post-it-to-logstash-via-pipeline/152714>\
**Category:** Logstash\
**Created:** [October 16, 2018, 8:02pm UTC](https://discuss.elastic.co/t/unable-to-read-logs-from-filebeat-and-post-it-to-logstash-via-pipeline/152714 "2018-10-16T20:02:38Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![majeti](https://avatars.discourse-cdn.com/v4/letter/m/bb73d2/32.png) [@majeti](https://discuss.elastic.co/u/majeti)\
**Post date:** [October 16, 2018, 8:02pm UTC](https://discuss.elastic.co/t/unable-to-read-logs-from-filebeat-and-post-it-to-logstash-via-pipeline/152714/1 "2018-10-16T20:02:38Z")

</div>

Though filebeat is up and running we are unable to see the logs getting parsed under logstash. Deploying logstash config through centralized pipelines. logstash and filebeat are residing on different nodes.  
Getting below error in logstash:

[2018-08-16T19:58:32,950][ERROR][logstash.pipeline] A plugin had an unrecoverable error. Will restart this plugin.  
Pipeline\_id:beats7  
Plugin: \<LogStash::Inputs::Beats port=\>5044, id=\>"3ecb088310f706f827e995c10532679a41540b96e3abd561f28616b5f5036c08", enable\_metric=\>true, codec=\>\<LogStash::Codecs::Plain id=\>"plain\_46e0da3e-dca4-4d60-822d-ee2cf8916338", enable\_metric=\>true, charset=\>"UTF-8"\>, host=\>"0.0.0.0", ssl=\>false, ssl\_verify\_mode=\>"none", include\_codec\_tag=\>true, ssl\_handshake\_timeout=\>10000, tls\_min\_version=\>1, tls\_max\_version=\>1.2, cipher\_suites=\>["TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384", "TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384", "TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256", "TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256", "TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA384", "TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384", "TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256", "TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256"], client\_inactivity\_timeout=\>60, executor\_threads=\>6\>  
Error: event executor terminated  
Exception: Java::JavaUtilConcurrent::RejectedExecutionException  
Stack: io.netty.util.concurrent.SingleThreadEventExecutor.reject(io/netty/util/concurrent/SingleThreadEventExecutor.java:821)  
io.netty.util.concurrent.SingleThreadEventExecutor.offerTask(io/netty/util/concurrent/SingleThreadEventExecutor.java:327)  
io.netty.util.concurrent.SingleThreadEventExecutor.addTask(io/netty/util/concurrent/SingleThreadEventExecutor.java:320)  
io.netty.util.concurrent.SingleThreadEventExecutor.execute(io/netty/util/concurrent/SingleThreadEventExecutor.java:746)  
io.netty.channel.AbstractChannel$AbstractUnsafe.register(io/netty/channel/AbstractChannel.java:479)  
io.netty.channel.SingleThreadEventLoop.register(io/netty/channel/SingleThreadEventLoop.java:80)  
io.netty.channel.SingleThreadEventLoop.register(io/netty/channel/SingleThreadEventLoop.java:74)  
io.netty.channel.MultithreadEventLoopGroup.register(io/netty/channel/MultithreadEventLoopGroup.java:86)  
io.netty.bootstrap.AbstractBootstrap.initAndRegister(io/netty/bootstrap/AbstractBootstrap.java:331)  
io.netty.bootstrap.AbstractBootstrap.doBind(io/netty/bootstrap/AbstractBootstrap.java:282)  
io.netty.bootstrap.AbstractBootstrap.bind(io/netty/bootstrap/AbstractBootstrap.java:278)  
io.netty.bootstrap.AbstractBootstrap.bind(io/netty/bootstrap/AbstractBootstrap.java:260)  
org.logstash.beats.Server.listen(org/logstash/beats/Server.java:57)  
java.lang.reflect.Method.invoke(java/lang/reflect/Method.java:498)  
org.jruby.javasupport.JavaMethod.invokeDirectWithExceptionHandling(org/jruby/javasupport/JavaMethod.java:438)  
org.jruby.javasupport.JavaMethod.invokeDirect(org/jruby/javasupport/JavaMethod.java:302)  
opt.webmis.logstash\_minus\_6\_dot\_2\_dot\_4.vendor.bundle.jruby.$2\_dot\_3\_dot\_0.gems.logstash\_minus\_input\_minus\_beats\_minus\_5\_dot\_0\_dot\_13\_minus\_java.lib.logstash.inputs.beats.run(/usr/elk/logstash-6.2.4/vendor/bundle/jruby/2.3.0/gems/logstash-input-beats-5.0.13-java/lib/logstash/inputs/beats.rb:198)  
opt.webmis.logstash\_minus\_6\_dot\_2\_dot\_4.logstash\_minus\_core.lib.logstash.pipeline.inputworker(/usr/elk/logstash-6.2.4/logstash-core/lib/logstash/pipeline.rb:514)  
opt.webmis.logstash\_minus\_6\_dot\_2\_dot\_4.logstash\_minus\_core.lib.logstash.pipeline.RUBY$method$inputworker$0$ **VARARGS** (/usr/elk/logstash\_minus\_6\_dot\_2\_dot\_4/logstash\_minus\_core/lib/logstash//usr/elk/logstash-6.2.4/logstash-core/lib/logstash/pipeline.rb)  
opt.webmis.logstash\_minus\_6\_dot\_2\_dot\_4.logstash\_minus\_core.lib.logstash.pipeline.block in start\_input(/usr/elk/logstash-6.2.4/logstash-core/lib/logstash/pipeline.rb:507)  
org.jruby.RubyProc.call(org/jruby/RubyProc.java:289)  
org.jruby.RubyProc.call(org/jruby/RubyProc.java:246)  
java.lang.Thread.run(java/lang/Thread.java:748)  
[2018-10-16T19:58:33,950][INFO][org.logstash.beats.Server] Starting server on port: 5044  
[2018-10-16T19:58:33,951][WARN][io.netty.channel.AbstractChannel] Force-closing a channel whose registration task was not accepted by an event loop: [id: 0x67834446]  
java.util.concurrent.RejectedExecutionException: event executor terminated

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 13, 2018, 8:02pm UTC](https://discuss.elastic.co/t/unable-to-read-logs-from-filebeat-and-post-it-to-logstash-via-pipeline/152714/2 "2018-11-13T20:02:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
