# While Filebeat talking to Logstash, logstash throws this error

**URL:** <https://discuss.elastic.co/t/while-filebeat-talking-to-logstash-logstash-throws-this-error/216495>\
**Category:** Logstash\
**Created:** [January 24, 2020, 10:24pm UTC](https://discuss.elastic.co/t/while-filebeat-talking-to-logstash-logstash-throws-this-error/216495 "2020-01-24T22:24:24Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![praveenmak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/praveenmak/32/22708_2.png) [@praveenmak](https://discuss.elastic.co/u/praveenmak)\
**Post date:** [January 24, 2020, 10:24pm UTC](https://discuss.elastic.co/t/while-filebeat-talking-to-logstash-logstash-throws-this-error/216495/1 "2020-01-24T22:24:24Z")

</div>

I see this error in Logstash logs (earlier I started with DEBUG mode but seems its all the time).  
The data is not getting ingested at all.  
Any idea how to resolve this ? please help

```
[2020-01-24T17:30:22,282][INFO][org.logstash.beats.BeatsHandler] [local: 10.121.149.135:5041, remote: 10.173.132.5:44528] Handling exception: org.logstash.beats.InvalidFrameProtocolException: Invalid version of beats protocol: 3
[2020-01-24T17:30:22,283][WARN][io.netty.channel.DefaultChannelPipeline] An exceptionCaught() event was fired, and it reached at the tail of the pipeline. It usually means the last handler in the pipeline did not handle the exception.
io.netty.handler.codec.DecoderException: org.logstash.beats.InvalidFrameProtocolException: Invalid version of beats protocol: 3
        at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:463) ~[netty-all-4.1.44.Final.jar:4.1.44.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.channelInputClosed(ByteToMessageDecoder.java:396) ~[netty-all-4.1.44.Final.jar:4.1.44.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.channelInputClosed(ByteToMessageDecoder.java:363) ~[netty-all-4.1.44.Final.jar:4.1.44.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.channelInactive(ByteToMessageDecoder.java:346) ~[netty-all-4.1.44.Final.jar:4.1.44.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelInactive(AbstractChannelHandlerContext.java:260) ~[netty-all-4.1.44.Final.jar:4.1.44.Final]
        at io.netty.channel.AbstractChannelHandlerContext.access$300(AbstractChannelHandlerContext.java:59) ~[netty-all-4.1.44.Final.jar:4.1.44.Final]
        at io.netty.channel.AbstractChannelHandlerContext$4.run(AbstractChannelHandlerContext.java:251) ~[netty-all-4.1.44.Final.jar:4.1.44.Final]
        at io.netty.util.concurrent.DefaultEventExecutor.run(DefaultEventExecutor.java:66) ~[netty-all-4.1.44.Final.jar:4.1.44.Final]
        at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:989) [netty-all-4.1.44.Final.jar:4.1.44.Final]
        at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-all-4.1.44.Final.jar:4.1.44.Final]
        at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) [netty-all-4.1.44.Final.jar:4.1.44.Final]
        at java.lang.Thread.run(Thread.java:748) [?:1.8.0_222]
Caused by: org.logstash.beats.InvalidFrameProtocolException: Invalid version of beats protocol: 3
        at org.logstash.beats.Protocol.version(Protocol.java:22) ~[logstash-input-beats-6.0.5.jar:?]
        at org.logstash.beats.BeatsParser.decode(BeatsParser.java:62) ~[logstash-input-beats-6.0.5.jar:?]
        at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:493) ~[netty-all-4.1.44.Final.jar:4.1.44.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:432) ~[netty-all-4.1.44.Final.jar:4.1.44.Final]
        ... 11 more
```

---

<div class="post-metadata">

**Author:** ![Ramicoh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ramicoh/32/61017_2.png) [@Ramicoh](https://discuss.elastic.co/u/Ramicoh)\
**Post date:** [February 5, 2020, 2:11am UTC](https://discuss.elastic.co/t/while-filebeat-talking-to-logstash-logstash-throws-this-error/216495/2 "2020-02-05T02:11:45Z")

</div>

Hey 🙂 Your Filebeat version is not compatible with your Logstash version.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 4, 2020, 2:11am UTC](https://discuss.elastic.co/t/while-filebeat-talking-to-logstash-logstash-throws-this-error/216495/3 "2020-03-04T02:11:51Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.