Functionbeat will reach End of Support on October 18, 2023. You should consider
moving your deployments to the more versatile and efficient Elastic Serverless
Forwarder.
Publishing to Logstash fails with "connection reset by peer" message
editPublishing to Logstash fails with "connection reset by peer" message
editFunctionbeat requires a persistent TCP connection to Logstash. If a firewall interferes with the connection, you might see errors like this:
Failed to publish events caused by: write tcp ... write: connection reset by peer
To solve the problem:
- make sure the firewall is not closing connections between Functionbeat and Logstash, or
-
set the
ttlvalue in the Logstash output to a value that’s lower than the maximum time allowed by the firewall, and setpipeliningto 0 (pipelining cannot be enabled whenttlis used).