日常巡检数据入库时发现filebeat存在如下报错:
2022-10-19T14:45:25.548+0800 ERROR logstash/async.go:256 Failed to publish events caused by: write tcp 127.0.0.1:56270->127.0.0.1:5055: write: connection reset by peer
2022-10-19T14:45:27.082+0800 ERROR pipeline/output.go:121 Failed to publish events: write tcp 127.0.0.1:56270->127.0.0.1:5055: write: connection reset by peer
2022-10-19T14:45:27.082+0800 INFO pipeline/output.go:95 Connecting to backoff(async(tcp://localhost:5055))
2022-10-19T14:45:27.083+0800 INFO pipeline/output.go:105 Connection to backoff(async(tcp://localhost:5055)) established
由于logstash日常数据处理时并非时刻有数据进入,导致自动重置端口链接。
问题排查解决
在Logstash配置文件中增加client_inactivity_timeout
配置选项,设置为1小时。
input {
beats {
port => 5055
client_inactivity_timeout => 36000
}
}
文章来源于互联网:Filebeat +Logstash write: connection reset by peer连接重置