Hi,
i have the following config:
output {
elasticsearch {
hosts => ["localhost:9200"]
index => "%{[@metadata][index]}-logs-%{+YYYY.MM.dd}"
}
elasticsearch {
hosts => ["remote:9200"]
index => "%{[@metadata][index]}-logs-%{+YYYY.MM.dd}"
}
}
when the remote is dead i remove the remote output from the config and counting on the --config.reload.automatic to reload the config, new config:
output {
elasticsearch {
hosts => ["localhost:9200"]
index => "%{[@metadata][index]}-logs-%{+YYYY.MM.dd}"
}
}
but i keep getting Attempted to resurrect connection to dead ES instance on the remote server and logstash wont connect to the local elk from that point.
is there a way to fix it?
running on 6.7.
Thanks!
Amir