Hello @USaman
I might be able to help. what I understand from this error
(cause io.netty.handler.codec.DecoderException: java.lang.IllegalStateException: Unknown beats protocol version: 3)
something from that client is still sending invalid Beats packets to Graylog’s Beats input. You might want to investigate further.
Troubleshooting:
When you click on show received messages. button, Look at the timestamp also enable your refresh rate to like 2 seconds or something similar. Sometime the Date/time are off you may not see message for another 6-8 hours, just a thought.
I’m unsure how FileBeat was configured. Show that may help
How long was everything working fine ( day, months, hour)?
The extractor modify message on that input so when you click show received message button the fields are present. Elasticsearch will take care of that. It is possible that an extractor/s is bad or Not working properly, it could drop or stop messages. Hence " No messages shown"
Perhaps try just FileBeat and see if you get the same errors, if so do the same with MetricBeat. If bothof them we would need to see how you configured your environment, if possible.
By chance are you using Docker?
If so this might be where the issue is. Then we would need to see you configuration of this. Make sure you port are not blocked,
EDIT:
Is this you also?
I also found this post, It may help even thou its a different version then yours, Same problem.
EDIT2:
I Just noticed something. You stated
In your screenshot that Beat Input configuration is incorrect. Try the following
