{"action":"closed","issue":{"url":"https://api.github.com/repos/spujadas/elk-docker/issues/28","repository_url":"https://api.github.com/repos/spujadas/elk-docker","labels_url":"https://api.github.com/repos/spujadas/elk-docker/issues/28/labels{/name}","comments_url":"https://api.github.com/repos/spujadas/elk-docker/issues/28/comments","events_url":"https://api.github.com/repos/spujadas/elk-docker/issues/28/events","html_url":"https://github.com/spujadas/elk-docker/issues/28","id":142309404,"number":28,"title":"filebeat broken pipe (no TLS)","user":{"login":"mimmozzo","id":500552,"avatar_url":"https://avatars.githubusercontent.com/u/500552?v=3","gravatar_id":"","url":"https://api.github.com/users/mimmozzo","html_url":"https://github.com/mimmozzo","followers_url":"https://api.github.com/users/mimmozzo/followers","following_url":"https://api.github.com/users/mimmozzo/following{/other_user}","gists_url":"https://api.github.com/users/mimmozzo/gists{/gist_id}","starred_url":"https://api.github.com/users/mimmozzo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mimmozzo/subscriptions","organizations_url":"https://api.github.com/users/mimmozzo/orgs","repos_url":"https://api.github.com/users/mimmozzo/repos","events_url":"https://api.github.com/users/mimmozzo/events{/privacy}","received_events_url":"https://api.github.com/users/mimmozzo/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-03-21T10:31:53Z","updated_at":"2016-03-21T11:04:27Z","closed_at":"2016-03-21T11:04:26Z","body":"Hi,\r\n\r\nI have created a docker-compose configuration with 2 containers:\r\n\r\n1. an ELK stack based on your docker image\r\n2. a tomcat container, containing one web application\r\n\r\nI have an issue trying to send log events from container 2 to 1 using Filebeat.\r\n\r\n```\r\n2016/03/21 10:21:12.463875 output.go:87: DBG  output worker: publish 145 events\r\n2016/03/21 10:21:12.464030 client.go:136: DBG  Try to publish 145 events to logstash with window size 10\r\n2016/03/21 10:21:12.481885 client.go:95: DBG  close connection\r\n2016/03/21 10:21:12.482323 client.go:114: DBG  0 events out of 145 events sent to logstash. Continue sending ...\r\n2016/03/21 10:21:12.482460 single.go:76: INFO Error publishing events (retrying): write tcp 172.18.0.3:36052->172.18.0.2:5044: write: broken pipe\r\n2016/03/21 10:21:12.482553 single.go:152: INFO send fail\r\n```\r\nI can ping the ELK container from tomcat without issues.\r\nThis is the filebeat config on tomcat container:\r\n\r\n```\r\noutput:\r\n  logstash:\r\n    enabled: true\r\n    hosts: [ \"elk:5044\" ]\r\n    timeout: 15\r\n    index: filebeat\r\n\r\nfilebeat:\r\n  prospectors:\r\n    -\r\n      paths:\r\n        - /usr/local/tomcat/logs/*\r\n```\r\n\r\nand this is the docker-compose.yml:\r\n\r\n```\r\nversion: '2'\r\nservices:\r\n\r\n    elk:\r\n        image: sebp/elk\r\n        ports:\r\n            - \"5601:5601\"\r\n            - \"9200:9200\"\r\n            - \"5044:5044\"\r\n            - \"5000:5000\"\r\n\r\n    tomcat-ad:\r\n        extends:\r\n            file: common.yml\r\n            service: tomcat7-jre7-baseline\r\n        ports:\r\n            - \"8080:8080\"\r\n        volumes:\r\n            - /home/ps/artifacts/webapp-1.0.1.war:/usr/local/tomcat/webapps/webapp.war\r\n            - /home/ps/queues:/root/queues\r\n        links:\r\n            - elk\r\n```\r\n\r\ndo you have any suggestions?\r\nThanks, best regards\r\n\r\nDomenico"}}