# Elastic 6.2 and logstash

**URL:** https://discuss.elastic.co/t/elastic-6-2-and-logstash/118900
**Category:** Elasticsearch
**Created:** [February 7, 2018, 6:31pm UTC](https://discuss.elastic.co/t/elastic-6-2-and-logstash/118900 "2018-02-07T18:31:58Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![rajsolanki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rajsolanki/32/86859_2.png) [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)
#### Post date: [February 7, 2018, 6:31pm UTC](https://discuss.elastic.co/t/elastic-6-2-and-logstash/118900/1 "2018-02-07T18:31:58Z")

</div>

After getting frustrated with very very simple configuration ([Elastic node hangs (i think)](https://discuss.elastic.co/t/elastic-node-hangs-i-think/118714/4) ) i installed 6.2 version of ES , Kibana and Logstash.

ES is running in debug mode.  
Logstash has debug on for following.

"logstash.outputs.elasticsearch" : "DEBUG",

I start log stash and there is no debug entries for reading my web server logs and sending event to ES.

but if i stop 6.2 version fo logstash and start 6.1 i see logs sending events to my ES.

just dont know what am i doing wrong 🙂

---

<div class="post-metadata">

### Author: ![rajsolanki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rajsolanki/32/86859_2.png) [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)
#### Post date: [February 7, 2018, 8:55pm UTC](https://discuss.elastic.co/t/elastic-6-2-and-logstash/118900/2 "2018-02-07T20:55:52Z")

</div>

reinstalled everything (ES , logstash and kibana). Now i m back to my origional issue which was reported in [Elastic node hangs (i think)](https://discuss.elastic.co/t/elastic-node-hangs-i-think/118714/4). So i have no idea what am i doing wrong ( There is nothing in grok failure logs , my logstash has debug on and has lines of my http server log entries. but in ES it just doesnt show up after some time.

any body experience this ?

---

<div class="post-metadata">

### Author: ![rajsolanki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rajsolanki/32/86859_2.png) [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)
#### Post date: [February 7, 2018, 9:44pm UTC](https://discuss.elastic.co/t/elastic-6-2-and-logstash/118900/3 "2018-02-07T21:44:20Z")

</div>

here is hot thread info

::: {fj1omh2}{fj1omh2OR92wdgceGjnM6Q}{p8z8fkGvRDmUExLz\_pydjA}{10.2.12.120}{10.2.12.120:9300}  
Hot threads at 2018-02-07T21:29:39.689Z, interval=500ms, busiestThreads=3, ignoreIdleThreads=true:

```
0.0% (86.6micros out of 500ms) cpu usage by thread 'elasticsearch[fj1omh2][[timer]]'
 10/10 snapshots sharing following 2 elements
   java.lang.Thread.sleep(Native Method)
   org.elasticsearch.threadpool.ThreadPool$CachedTimeThread.run(ThreadPool.java:541)

```

this is my logstash settings output from ES

{  
"logstash-2018.02.07" : {  
"settings" : {  
"index" : {  
"refresh\_interval" : "-1",  
"number\_of\_shards" : "5",  
"provided\_name" : "logstash-2018.02.07",  
"creation\_date" : "1518025677242",  
"number\_of\_replicas" : "1",  
"uuid" : "IuhoKe4wRqWG47M1YQsV\_A",  
"version" : {  
"created" : "6020099"  
}  
}  
}  
}  
}

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [February 8, 2018, 8:46pm UTC](https://discuss.elastic.co/t/elastic-6-2-and-logstash/118900/4 "2018-02-08T20:46:34Z")

</div>

> [@rajsolanki](#):
>
> "refresh\_interval" : "-1",

Did you set that? If so it's going to mean events (documents) will not show up even though they are being received by Elasticsearch. It needs to be a positive number.

---

<div class="post-metadata">

### Author: ![rajsolanki](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rajsolanki/32/86859_2.png) [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)
#### Post date: [February 8, 2018, 9:05pm UTC](https://discuss.elastic.co/t/elastic-6-2-and-logstash/118900/5 "2018-02-08T21:05:16Z")

</div>

so positive number is represented in # of seconds ?

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [February 9, 2018, 1:23am UTC](https://discuss.elastic.co/t/elastic-6-2-and-logstash/118900/6 "2018-02-09T01:23:14Z")

</div>

Yep.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 9, 2018, 1:23am UTC](https://discuss.elastic.co/t/elastic-6-2-and-logstash/118900/7 "2018-03-09T01:23:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
