Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- logstash_1 | Sending Logstash's logs to /usr/share/logstash/logs which is now configured via log4j2.properties
- logstash_1 | [2018-01-02T23:29:28,534][INFO ][logstash.modules.scaffold] Initializing module {:module_name=>"netflow", :directory=>"/usr/share/logstash/modules/netflow/configuration"}
- logstash_1 | [2018-01-02T23:29:28,556][INFO ][logstash.modules.scaffold] Initializing module {:module_name=>"fb_apache", :directory=>"/usr/share/logstash/modules/fb_apache/configuration"}
- logstash_1 | [2018-01-02T23:29:29,894][INFO ][logstash.modules.scaffold] Initializing module {:module_name=>"arcsight", :directory=>"/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/x-pack-6.1.1-java/modules/arcsight/configuration"}
- logstash_1 | [2018-01-02T23:29:30,061][INFO ][logstash.setting.writabledirectory] Creating directory {:setting=>"path.queue", :path=>"/usr/share/logstash/data/queue"}
- logstash_1 | [2018-01-02T23:29:30,066][INFO ][logstash.setting.writabledirectory] Creating directory {:setting=>"path.dead_letter_queue", :path=>"/usr/share/logstash/data/dead_letter_queue"}
- logstash_1 | [2018-01-02T23:29:30,722][WARN ][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
- logstash_1 | [2018-01-02T23:29:30,772][INFO ][logstash.agent ] No persistent UUID file found. Generating new UUID {:uuid=>"294e0351-d6d1-43af-87e1-fe07314904fa", :path=>"/usr/share/logstash/data/uuid"}
- logstash_1 | [2018-01-02T23:29:32,158][INFO ][logstash.runner ] Starting Logstash {"logstash.version"=>"6.1.1"}
- logstash_1 | [2018-01-02T23:29:32,981][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
- logstash_1 | [2018-01-02T23:29:35,614][WARN ][logstash.outputs.elasticsearch] You are using a deprecated config setting "document_type" set in elasticsearch. Deprecated settings will continue to work, but are scheduled for removal from logstash in the future. Document types are being deprecated in Elasticsearch 6.0, and removed entirely in 7.0. You should avoid this feature If you have any questions about this, please visit the #logstash channel on freenode irc. {:name=>"document_type", :plugin=><LogStash::Outputs::ElasticSearch hosts=>[http://woodhick_elasticsearch_1:9200], bulk_path=>"/_xpack/monitoring/_bulk?system_id=logstash&system_api_version=2&interval=1s", manage_template=>false, document_type=>"%{[@metadata][document_type]}", sniffing=>false, user=>"elastic", password=><password>, id=>"b010bbaea3845475573c008ac898cdec60aba3158b54b60c19e0c2d8d745094b", enable_metric=>true, codec=><LogStash::Codecs::Plain id=>"plain_6a7ef54b-fe8d-4f18-9c05-e5e8c9447ec2", enable_metric=>true, charset=>"UTF-8">, workers=>1, template_name=>"logstash", template_overwrite=>false, doc_as_upsert=>false, script_type=>"inline", script_lang=>"painless", script_var_name=>"event", scripted_upsert=>false, retry_initial_interval=>2, retry_max_interval=>64, retry_on_conflict=>1, action=>"index", ssl_certificate_verification=>true, sniffing_delay=>5, timeout=>60, pool_max=>1000, pool_max_per_route=>100, resurrect_delay=>5, validate_after_inactivity=>10000, http_compression=>false>}
- logstash_1 | [2018-01-02T23:29:36,609][INFO ][logstash.outputs.elasticsearch] Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[http://elastic:password@:9200/]}}
- logstash_1 | [2018-01-02T23:29:36,620][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://elastic:password@:9200/, :path=>"/"}
- logstash_1 | [2018-01-02T23:29:36,835][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://elastic:password@:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://elastic:password@:9200/][Manticore::ClientProtocolException] URI does not specify a valid host name: http:/"}
- logstash_1 | [2018-01-02T23:29:36,871][INFO ][logstash.outputs.elasticsearch] New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["http://woodhick_elasticsearch_1:9200"]}
- logstash_1 | [2018-01-02T23:29:36,896][INFO ][logstash.pipeline ] Starting pipeline {:pipeline_id=>".monitoring-logstash", "pipeline.workers"=>1, "pipeline.batch.size"=>2, "pipeline.batch.delay"=>5, "pipeline.max_inflight"=>2, :thread=>"#<Thread:0x1555abed run>"}
- logstash_1 | [2018-01-02T23:29:37,078][INFO ][logstash.licensechecker.licensereader] Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[http://elastic:password@:9200/]}}
- logstash_1 | [2018-01-02T23:29:37,080][INFO ][logstash.licensechecker.licensereader] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://elastic:password@:9200/, :path=>"/"}
- logstash_1 | [2018-01-02T23:29:37,092][WARN ][logstash.licensechecker.licensereader] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://elastic:password@:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://elastic:password@:9200/][Manticore::ClientProtocolException] URI does not specify a valid host name: http:/"}
- logstash_1 | [2018-01-02T23:29:37,136][WARN ][logstash.licensechecker.licensereader] Marking url as dead. Last error: [LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError] Elasticsearch Unreachable: [http://elastic:password@:9200/][Manticore::ClientProtocolException] URI does not specify a valid host name: http:/_xpack {:url=>http://elastic:password@:9200/, :error_message=>"Elasticsearch Unreachable: [http://elastic:password@:9200/][Manticore::ClientProtocolException] URI does not specify a valid host name: http:/_xpack", :error_class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError"}
- logstash_1 | Elasticsearch Unreachable: [http://elastic:password@:9200/][Manticore::ClientProtocolException] URI does not specify a valid host name: http:/_xpack
- logstash_1 | [2018-01-02T23:29:37,167][ERROR][logstash.licensechecker.licensemanager] Unable to retrieve license information from license server {:message=>"Elasticsearch Unreachable: [http://elastic:password@:9200/][Manticore::ClientProtocolException] URI does not specify a valid host name: http:/_xpack", :class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError"}
- logstash_1 | [2018-01-02T23:29:37,174][WARN ][logstash.licensechecker.xpackinfo] Nil response from License Server
- logstash_1 | [2018-01-02T23:29:37,285][INFO ][logstash.pipeline ] Pipeline started {"pipeline.id"=>".monitoring-logstash"}
- logstash_1 | [2018-01-02T23:29:38,657][INFO ][logstash.outputs.elasticsearch] Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[http://logstash_internal:[email protected]:9200/]}}
- logstash_1 | [2018-01-02T23:29:38,663][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://logstash_internal:[email protected]:9200/, :path=>"/"}
- logstash_1 | [2018-01-02T23:29:38,789][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://logstash_internal:[email protected]:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://logstash_internal:[email protected]:9200/][Manticore::SocketException] Connection refused (Connection refused)"}
- logstash_1 | [2018-01-02T23:29:38,802][INFO ][logstash.outputs.elasticsearch] Using mapping template from {:path=>nil}
- logstash_1 | [2018-01-02T23:29:38,830][ERROR][logstash.outputs.elasticsearch] Failed to install template. {:message=>"Template file '' could not be found!", :class=>"ArgumentError", :backtrace=>["/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-output-elasticsearch-9.0.2-java/lib/logstash/outputs/elasticsearch/template_manager.rb:31:in `read_template_file'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-output-elasticsearch-9.0.2-java/lib/logstash/outputs/elasticsearch/template_manager.rb:17:in `get_template'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-output-elasticsearch-9.0.2-java/lib/logstash/outputs/elasticsearch/template_manager.rb:7:in `install_template'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-output-elasticsearch-9.0.2-java/lib/logstash/outputs/elasticsearch/common.rb:57:in `install_template'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-output-elasticsearch-9.0.2-java/lib/logstash/outputs/elasticsearch/common.rb:26:in `register'", "/usr/share/logstash/logstash-core/lib/logstash/output_delegator_strategies/shared.rb:9:in `register'", "/usr/share/logstash/logstash-core/lib/logstash/output_delegator.rb:43:in `register'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:343:in `register_plugin'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:354:in `block in register_plugins'", "org/jruby/RubyArray.java:1734:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:354:in `register_plugins'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:743:in `maybe_setup_out_plugins'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:364:in `start_workers'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:288:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:248:in `block in start'"]}
- logstash_1 | [2018-01-02T23:29:38,836][INFO ][logstash.outputs.elasticsearch] New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["//127.0.0.1"]}
- logstash_1 | [2018-01-02T23:29:38,845][INFO ][logstash.pipeline ] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>2, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>5, "pipeline.max_inflight"=>250, :thread=>"#<Thread:0x324096ef run>"}
- logstash_1 | [2018-01-02T23:29:38,861][INFO ][logstash.inputs.http_poller] Registering http_poller Input {:type=>nil, :schedule=>{"cron"=>"* * * * * UTC"}, :timeout=>nil}
- logstash_1 | [2018-01-02T23:29:38,885][INFO ][logstash.pipeline ] Pipeline started {"pipeline.id"=>"main"}
- logstash_1 | [2018-01-02T23:29:39,055][INFO ][logstash.agent ] Pipelines running {:count=>2, :pipelines=>[".monitoring-logstash", "main"]}
- logstash_1 | [2018-01-02T23:29:39,109][ERROR][logstash.inputs.metrics ] Monitoring is not available: License information is currently unavailable. Please make sure you have added your production elasticsearch connection info in the xpack.monitoring.elasticsearch settings.
- logstash_1 | [2018-01-02T23:29:41,871][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://elastic:password@:9200/, :path=>"/"}
- logstash_1 | [2018-01-02T23:29:41,886][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://elastic:password@:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://elastic:password@:9200/][Manticore::ClientProtocolException] URI does not specify a valid host name: http:/"}
- logstash_1 | [2018-01-02T23:29:42,109][INFO ][logstash.licensechecker.licensereader] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://elastic:password@:9200/, :path=>"/"}
- logstash_1 | [2018-01-02T23:29:42,117][WARN ][logstash.licensechecker.licensereader] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://elastic:password@:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://elastic:password@:9200/][Manticore::ClientProtocolException] URI does not specify a valid host name: http:/"}
- logstash_1 | [2018-01-02T23:29:43,803][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://logstash_internal:[email protected]:9200/, :path=>"/"}
- logstash_1 | [2018-01-02T23:29:43,812][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://logstash_internal:[email protected]:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://logstash_internal:[email protected]:9200/][Manticore::SocketException] Connection refused (Connection refused)"}
- logstash_1 | [2018-01-02T23:29:46,899][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://elastic:password@:9200/, :path=>"/"}
- logstash_1 | [2018-01-02T23:29:46,905][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://elastic:password@:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://elastic:password@:9200/][Manticore::ClientProtocolException] URI does not specify a valid host name: http:/"}
- logstash_1 | [2018-01-02T23:29:47,121][INFO ][logstash.licensechecker.licensereader] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://elastic:password@:9200/, :path=>"/"}
- logstash_1 | [2018-01-02T23:29:47,128][WARN ][logstash.licensechecker.licensereader] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://elastic:password@:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://elastic:password@:9200/][Manticore::ClientProtocolException] URI does not specify a valid host name: http:/"}
- logstash_1 | [2018-01-02T23:29:48,815][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://logstash_internal:[email protected]:9200/, :path=>"/"}
- logstash_1 | [2018-01-02T23:29:48,829][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://logstash_internal:[email protected]:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://logstash_internal:[email protected]:9200/][Manticore::SocketException] Connection refused (Connection refused)"}
- logstash_1 | [2018-01-02T23:29:51,909][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://elastic:password@:9200/, :path=>"/"}
- logstash_1 | [2018-01-02T23:29:51,914][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://elastic:password@:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://elastic:password@:9200/][Manticore::ClientProtocolException] URI does not specify a valid host name: http:/"}
- logstash_1 | [2018-01-02T23:29:52,132][INFO ][logstash.licensechecker.licensereader] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://elastic:password@:9200/, :path=>"/"}
- logstash_1 | [2018-01-02T23:29:52,135][WARN ][logstash.licensechecker.licensereader] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://elastic:password@:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://elastic:password@:9200/][Manticore::ClientProtocolException] URI does not specify a valid host name: http:/"}
- logstash_1 | [2018-01-02T23:29:53,833][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://logstash_internal:[email protected]:9200/, :path=>"/"}
- logstash_1 | [2018-01-02T23:29:53,845][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://logstash_internal:[email protected]:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://logstash_internal:[email protected]:9200/][Manticore::SocketException] Connection refused (Connection refused)"}
- logstash_1 | [2018-01-02T23:29:56,918][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://elastic:password@:9200/, :path=>"/"}
- logstash_1 | [2018-01-02T23:29:56,923][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://elastic:password@:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://elastic:password@:9200/][Manticore::ClientProtocolException] URI does not specify a valid host name: http:/"}
- logstash_1 | [2018-01-02T23:29:57,138][INFO ][logstash.licensechecker.licensereader] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://elastic:password@:9200/, :path=>"/"}
- logstash_1 | [2018-01-02T23:29:57,142][WARN ][logstash.licensechecker.licensereader] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://elastic:password@:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://elastic:password@:9200/][Manticore::ClientProtocolException] URI does not specify a valid host name: http:/"}
- logstash_1 | [2018-01-02T23:29:58,849][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://logstash_internal:[email protected]:9200/, :path=>"/"}
- logstash_1 | [2018-01-02T23:29:58,860][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://logstash_internal:[email protected]:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://logstash_internal:[email protected]:9200/][Manticore::SocketException] Connection refused (Connection refused)"}
- logstash_1 | [2018-01-02T23:30:01,105][FATAL][logstash.runner ] An unexpected error occurred! {:error=>#<NoMethodError: undefined method `<' for nil:NilClass>, :backtrace=>["/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-output-elasticsearch-9.0.2-java/lib/logstash/outputs/elasticsearch/common.rb:213:in `get_event_type'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-output-elasticsearch-9.0.2-java/lib/logstash/outputs/elasticsearch/common.rb:165:in `event_action_params'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-output-elasticsearch-9.0.2-java/lib/logstash/outputs/elasticsearch/common.rb:39:in `event_action_tuple'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-output-elasticsearch-9.0.2-java/lib/logstash/outputs/elasticsearch/common.rb:34:in `block in multi_receive'", "org/jruby/RubyArray.java:2486:in `map'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-output-elasticsearch-9.0.2-java/lib/logstash/outputs/elasticsearch/common.rb:34:in `multi_receive'", "/usr/share/logstash/logstash-core/lib/logstash/output_delegator_strategies/shared.rb:13:in `multi_receive'", "/usr/share/logstash/logstash-core/lib/logstash/output_delegator.rb:50:in `multi_receive'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:487:in `block in output_batch'", "org/jruby/RubyHash.java:1343:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:486:in `output_batch'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:438:in `worker_loop'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:393:in `block in start_workers'"]}
- woodhick_logstash_1 exited with code 1
Advertisement
Add Comment
Please, Sign In to add comment