日常巡检数据入库时发现filebeat存在如下报错：

2022-10-19T14:45:25.548+0800    ERROR   logstash/async.go:256   Failed to publish events caused by: write tcp 127.0.0.1:56270->127.0.0.1:5055: write: connection reset by peer
2022-10-19T14:45:27.082+0800    ERROR   pipeline/output.go:121  Failed to publish events: write tcp 127.0.0.1:56270->127.0.0.1:5055: write: connection reset by peer
2022-10-19T14:45:27.082+0800    INFO    pipeline/output.go:95   Connecting to backoff(async(tcp://localhost:5055))
2022-10-19T14:45:27.083+0800    INFO    pipeline/output.go:105  Connection to backoff(async(tcp://localhost:5055)) established

由于logstash日常数据处理时并非时刻有数据进入，导致自动重置端口链接。

问题排查解决

在Logstash配置文件中增加client_inactivity_timeout 配置选项，设置为1小时。

input {
  beats {
    port => 5055
    client_inactivity_timeout => 36000
  }
}