Hi everyone,
we are running a Robotic Process Automation software called "Automation Anywhere" which uses Elasticsearch 7.8.0:
"version" : {
"number" : "7.8.0",
"build_flavor" : "oss",
"build_type" : "zip",
"build_hash" : "757314695644ea9a1dc2fecd26d1a43856725e65",
"build_date" : "2020-06-14T19:35:50.234439Z",
"build_snapshot" : false,
"lucene_version" : "8.5.1",
"minimum_wire_compatibility_version" : "6.8.0",
"minimum_index_compatibility_version" : "6.0.0-beta1"
}
To ship the logs from Elasticsearch to Kibana, we are using logstash 7.10.0. Due to the log4j security issues, we tried to update it to version 7.17.1.
According to the compatibility matrix (Unterstützungsmatrix | Elastic) Elasticsearch 7.8.0 should work with logstash 7.17.1.
But still, we are getting the following error message:
[2022-03-25T11:21:12,329][INFO ][logstash.javapipeline ][main] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>4, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>500, "pipeline.sources"=>["E:/Logstash/config/CR.conf"], :thread=>"#<Thread:0x7beffb32 run>"}
[2022-03-25T11:21:13,188][INFO ][logstash.javapipeline ][main] Pipeline Java execution initialization time {"seconds"=>0.86}
[2022-03-25T11:21:13,932][WARN ][logstash.runner ] SIGINT received. Shutting down.
[2022-03-25T11:21:14,257][ERROR][logstash.javapipeline ][main] Pipeline error {:pipeline_id=>"main", :exception=>#<LogStash::ConfigurationError: Could not connect to a compatible version of Elasticsearch>, :backtrace=>["E:/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-elasticsearch-4.12.2/lib/logstash/inputs/elasticsearch.rb:481:in `test_connection!'", "E:/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-elasticsearch-4.12.2/lib/logstash/inputs/elasticsearch.rb:243:in `register'", "E:/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-mixin-ecs_compatibility_support-1.3.0-java/lib/logstash/plugin_mixins/ecs_compatibility_support/target_check.rb:48:in `register'", "E:/logstash/logstash-core/lib/logstash/java_pipeline.rb:232:in `block in register_plugins'", "org/jruby/RubyArray.java:1821:in `each'", "E:/logstash/logstash-core/lib/logstash/java_pipeline.rb:231:in `register_plugins'", "E:/logstash/logstash-core/lib/logstash/java_pipeline.rb:390:in `start_inputs'", "E:/logstash/logstash-core/lib/logstash/java_pipeline.rb:315:in `start_workers'", "E:/logstash/logstash-core/lib/logstash/java_pipeline.rb:189:in `run'", "E:/logstash/logstash-core/lib/logstash/java_pipeline.rb:141:in `block in start'"], "pipeline.sources"=>["E:/Logstash/config/CR.conf"], :thread=>"#<Thread:0x7beffb32 run>"}
[2022-03-25T11:21:14,258][INFO ][logstash.javapipeline ][main] Pipeline terminated {"pipeline.id"=>"main"}
[2022-03-25T11:21:14,273][ERROR][logstash.agent ] Failed to execute action {:id=>:main, :action_type=>LogStash::ConvergeResult::FailedAction, :message=>"Could not execute action: PipelineAction::Create<main>, action_result: false", :backtrace=>nil}
[2022-03-25T11:21:14,333][INFO ][logstash.runner ] Logstash shut down.
[2022-03-25T11:21:14,340][FATAL][org.logstash.Logstash ] Logstash stopped processing because of an error: (SystemExit) exit
org.jruby.exceptions.SystemExit: (SystemExit) exit
at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:747) ~[jruby-complete-9.2.20.1.jar:?]
at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:710) ~[jruby-complete-9.2.20.1.jar:?]
at E_3a_.logstash.lib.bootstrap.environment.<main>(E:\logstash\lib\bootstrap\environment.rb:94) ~[?:?]
Does anyone have an idea how I can make this work?
Thanks in advance!
)