报错日志
filebeat | 2021-12-27T17:12:03.469+0800 ERROR logstash/async.go:256 Failed to publish events caused by: write tcp 192.168.0.5:35510->192.168.0.4:5044: write: connection reset by peer
filebeat | 2021-12-27T17:12:04.469+0800 ERROR pipeline/output.go:121 Failed to publish events: write tcp 192.168.0.5:35510->192.168.0.4:5044: write: connection reset by peer
filebeat | 2021-12-27T17:14:18.473+0800 ERROR logstash/async.go:256 Failed to publish events caused by: write tcp 192.168.0.5:36078->192.168.0.4:5044: write: connection reset by peer
filebeat | 2021-12-27T17:14:19.473+0800 ERROR pipeline/output.go:121 Failed to publish events: write tcp 192.168.0.5:36078->192.168.0.4:5044: write: connection reset by peer
filebeat | 2021-12-27T17:17:13.476+0800 ERROR logstash/async.go:256 Failed to publish events caused by: write tcp 192.168.0.5:36228->192.168.0.4:5044: write: connection reset by peer
filebeat | 2021-12-27T17:17:14.476+0800 ERROR pipeline/output.go:121 Failed to publish events: write tcp 192.168.0.5:36228->192.168.0.4:5044: write: connection reset by peer
filebeat | 2021-12-27T17:20:13.479+0800 ERROR logstash/async.go:256 Failed to publish events caused by: write tcp 192.168.0.5:36440->192.168.0.4:5044: write: connection reset by peer
filebeat | 2021-12-27T17:20:14.480+0800 ERROR pipeline/output.go:121 Failed to publish events: write tcp 192.168.0.5:36440->192.168.0.4:5044: write: connection reset by peer
filebeat | 2021-12-27T17:21:18.481+0800 ERROR logstash/async.go:256 Failed to publish events caused by: write tcp 192.168.0.5:36672->192.168.0.4:5044: write: connection reset by peer
filebeat | 2021-12-27T17:21:19.481+0800 ERROR pipeline/output.go:121 Failed to publish events: write tcp 192.168.0.5:36672->192.168.0.4:5044: write: connection reset by peer
filebeat | 2021-12-27T17:23:08.483+0800 ERROR logstash/async.go:256 Failed to publish events caused by: write tcp 192.168.0.5:36786->192.168.0.4:5044: write: connection reset by peer
filebeat | 2021-12-27T17:23:09.484+0800 ERROR pipeline/output.go:121 Failed to publish events: write tcp 192.168.0.5:36786->192.168.0.4:5044: write: connection reset by peer
filebeat | 2021-12-27T17:28:03.490+0800 ERROR logstash/async.go:256 Failed to publish events caused by: write tcp 192.168.0.5:38130->192.168.0.4:5044: write: connection reset by peer
filebeat | 2021-12-27T17:28:04.490+0800 ERROR pipeline/output.go:121 Failed to publish events: write tcp 192.168.0.5:38130->192.168.0.4:5044: write: connection reset by peer
原因:
客户端操作不频繁导致Logstash可能由于不工作而尝试重置连接,在这种情况下会引起connection reset by peer
解决:
在logstash的配置文件添加client_inactivity_timeout参数:
input {
beats {
port => "5044"
client_inactivity_timeout => 36000
}
}