I'm trying to configure LogStash to send events to view a file and elasticsearch server.
When I start the logout in the output stdout, it runs fine:
stdout {codec = & gt; Rubydebug}
But when I add elasticsearch output:
elasticsearch {cluster = & gt; 'Myclustername' host = & gt; 'Mayp' node_name = & gt; The 'Aragorn'}
Logstas start
16 Marc 2015 3:44:24 PM org.elasticsearch.node.internal.InternalNode & lt; Init & gt; Information: [Aragorn] version [1.4.0], PID [7136], build in [BC 94 BD 8 / 2014-11-05 T 14: 26: 12 Z] March 16, 2015 3:44:24 PM Yag.Lasticistic Search Node.internal.InternalNode & LT; Init & gt; Info: [Aragon] Start ... 16 March 2015 3:44:24 PM org.elasticsearch.plugins.PluginsService & lt; Init & gt; Info: [Aragon] Load [], Sites [] March 16, 2015 3:44:25 PM org.elasticsearch.node.internal.InternalNode & lt; Init & gt; Information: [Aragorn] Arnbi to starting March 16 2015 3:44:25 PM org.elasticsearch.node.internal.InternalNode information: [Aragorn] began ... 16 Marc 2015 3:44:25 PM org.elasticsearch.transport. TransportService doStart information: [Aragorn] bound_address {Cabinet [/ 0: 0: 0: 0: 0: 0: 0: 0: 9300]}, publish_address {Cabinet [/10.98.134.83:9300]} March 16, 2015 3: 44: 25 PM org.elasticsearch.discovery.DiscoveryService doStart information: [Aragorn] myclustername / RjasP2X0ShKXEl0f2WRxBA run Marc 16, 2015 15:44:30 org.elasticsearch.cluster.service.InternalClusterService $ UpdateTask information: [Aragorn] Detected_master [Aragorn] [0YytUoWlQ2qgw2_0i5V4mQ] [SOMEMACHINE] [Cabinet [/ MYIP: 9300]] said, [[A Ragnone] [0YytUoWlQ2qgw2_0i5V4mQ] [Cabinet [/ MYIP: 9300]],}, Reason: Zen-Disco Received (from Master [[Aragorn] [0YytUoWlQ2qgw2_0i5V4mQ] [SOMEMACHINE] [Cabinet [/ MYIP: 9300]]]) March 16, 2015 15:44:30 Information started org.elasticsearch.node.internal.InternalNode: started [Aragorn]
But when the messages begin to arrive, anything in fact L Is not sent to asticsearch and these logstash outputs start displaying in:
Warning: [Aragon] Message (response) [28] Handler org.elasticsearch.action.sup Port.master.TransportMasterNodeOperationAction not fully read for $ 6 @ 17b 531e, error [true], resetting 16 March 2015 3:44:54 PM org.elasticsearch.transport.netty.MessageChannelHandler Receives Message Warning: [Aragorn] Not fully read (response) handler for message [29] org.elasticsearch. Action.support.master.TransportMasterNodeOperationAction$6@130 82f0, error [true], reset
and
{: timestamp = & gt; "2015-03-16T15: 44: 54.377000 + 0100",: Message = & gt; Unsuccessful action with feedback of 500, skipping action ...
(The above message is too long but does not seem to include any useful diagnostics)
What could be wrong?
No comments:
Post a Comment