Below issue occurred while Filebeat trying to publish events to Logstash.
Failed to publish events caused by: write tcp 10.0.2.12:33822->10.2.3.17:5044: write: connection reset by peer 2017-05-06T12:55:33-05:00 INFO Error publishing events (retrying): write tcp 10.0.2.12:33822->10.2.3.17:5044: write: connection reset by peer
This can cause by many reasons :
- Logstash is not running or port is used by some other instance of Logstash.
- Filebeat and Logstash versions are not compatible.
- If fireball is enabled between different VM versions then there should be same certificate to connect with Logstash.
Leave you feedback to enhance more on this topic so that make it more helpful for others.