logstash写入es报错

Logstash | 作者 insist_93 | 发布于2019年02月20日 | 阅读数:727

集群2节点,另部署了一台机器上部署了3个Logstash实例,使用大概30个input-jdbc插件同步数据库数据。时常出现以下错误,然后Logstash停止写入,重启Logstas恢复



[2019-02-20T14:15:00,819][WARN ][logstash.outputs.elasticsearch] Marking url as dead. Last error: [LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError] Elasticsearch Unreachable: [http://10.46.68.179:9200/][Manticore::SocketTimeout] Read timed out {:url=>http://10.46.68.179:9200/, :error_message=>"Elasticsearch Unreachable: [http://10.46.68.179:9200/][Manticore::SocketTimeout] Read timed out", :error_class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError"}
[2019-02-20T14:15:00,829][ERROR][logstash.outputs.elasticsearch] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error_message=>"Elasticsearch Unreachable: [http://10.46.68.179:9200/][Manticore::SocketTimeout] Read timed out", :class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError", :will_retry_in_seconds=>2}
[2019-02-20T14:15:00,866][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://10.46.68.179:9200/, :path=>"/"}
[2019-02-20T14:15:00,867][ERROR][logstash.outputs.elasticsearch] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error_message=>"Elasticsearch Unreachable: [http://10.46.68.179:9200/][Manticore::SocketTimeout] Read timed out", :class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError", :will_retry_in_seconds=>2}


已邀请:

tacsklet - 公司有用到es

赞同来自:

2个节点都是数据节点吗,看你贴出的只有一个地址超时,output写两个地址看看错误是否会减少,以此判断是不是请求过多的问题。

zqc0512 - andy zhou

赞同来自:

超时 搞ES集群全部地址试试看。不要单个地址。
 

要回复问题请先登录注册