多个logstash大量并发的情况下偶尔报错连接不上es
[2018-09-19T16:20:13,708][WARN ][logstash.outputs.elasticsearch] Marking url as dead. Last error: [LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError] Elasticsearch Unreachable: [http://xxxxx:xxxxxx@192.168.1.2:9200/][Manticore::SocketTimeout] Read timed out {:url=>http://xxxxx:xxxxxx@192.168.1.1:9200/, :error_message=>"Elasticsearch Unreachable: [http://xxxxx:xxxxxx@192.168.1.2:9200/][Manticore::SocketTimeout] Read timed out", :error_class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError"}
[2018-09-19T16:20:13,708][ERROR][logstash.outputs.elasticsearch] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error_message=>"Elasticsearch Unreachable: [http://xxxxx:xxxxxx@192.168.1.2:9200/][Manticore::SocketTimeout] Read timed out", :class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError", :will_retry_in_seconds=>2}
[2018-09-19T16:20:13,708][WARN ][logstash.outputs.elasticsearch] Marking url as dead. Last error: [LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError] Elasticsearch Unreachable: [http://xxxxx:xxxxxx@192.168.1.2:9200/][Manticore::SocketTimeout] Read timed out {:url=>http://xxxxx:xxxxxx@192.168.1.1:9200/, :error_message=>"Elasticsearch Unreachable: [http://xxxxx:xxxxxx@192.168.1.2:9200/][Manticore::SocketTimeout] Read timed out", :error_class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError"}
[2018-09-19T16:20:13,708][ERROR][logstash.outputs.elasticsearch] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error_message=>"Elasticsearch Unreachable: [http://xxxxx:xxxxxx@192.168.1.2:9200/][Manticore::SocketTimeout] Read timed out", :class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError", :will_retry_in_seconds=>2}
3 个回复
zqc0512 - andy zhou
赞同来自:
zqc0512 - andy zhou
赞同来自:
你把logstash的bulk cache调整大点,不要1条就转发。有几个size调整下。
cc1079154808
赞同来自: