Overview

An alarm is reported on one of the servers with the following information:

‘The resource AAA1-ELK-Telnet-JKT is not available. The Service is not available in Port: 21042.’

This article explains the Root cause and solution to resolve the Alarm seen in EMS Systems.

 

Solution

Root cause

• Filebeat process that runs on all AAA servers uses port 21042.
• When the server had crashed earlier, the filebeat process also stopped.
• Due to this - ‘service not available’ alarms were showing on EMS.

 

Resolution

• Login with root user and switch to filebeat user

su - filebeat

• Go to below-mentioned path and run startup script for the service

cd /opt/filebeat/filebeat-7.9.2-linux-x86_64/bin

sh start-filebeat.sh

 

Verification

Run the following command to verify whether Filebeat process is running or not: 

netstat -ntlp | grep 21042

It must show LISTEN status along with the filebeat process id. Example:

-bash-4.2$ netstat -ntlp | grep 21042

tcp        0      0 10.232.28.1:21042       0.0.0.0:*               LISTEN      9854/filebeat 

•