Hi All,
All of sudden, I am getting this error in elastic_logs. Haven't made any changes. Also, the heap size is set to 8 gb :
-Xms8g
-Xmx8g
Logs: -
[2019-06-06T06:54:42,935][DEBUG][o.e.a.b.TransportShardBulkAction] [xxxxxxxxx] [winlogbeat-2019.06.06][0] failed to execute bulk item (index) index {[winlogbeat-2019.06.06][%{[type]}][Bz1tLGsBel10KW7wMc2l], source[{"agent":{"version":"7.0.0","id":"dc705780-781f-43ca-bcae-294e3397b5c0","ephemeral_id":"2c2326c0-53a0-45a1-8e9d-b8733f3f9c0b","hostname":"xxxxxxxxxx","type":"winlogbeat"},"ecs":{"version":"1.0.0"},"event":{"created":"2019-06-06T11:19:31.050Z","kind":"event","code":7036},"@timestamp":"2019-06-06T10:15:14.920Z","log":{"level":"information"},"tags":["beats_input_codec_plain_applied"],"host":{"id":"f8a8e42d-61ad-4e3d-9590-dbd38d386b8f","hostname":"xxxxxxxx","architecture":"x86_64","name":"xxxxxxxxxxx","os":{"platform":"windows","kernel":"6.3.9600.19304 (winblue_ltsb_escrow.190305-1818)","build":"9600.19302","version":"6.3","family":"windows","name":"Windows Server 2012 R2 Standard"}},"winlog":{"provider_guid":"{555908d1-a6d7-4695-8e1e-26931d2012f4}","keywords":["Classic"],"event_id":7036,"task":"","api":"wineventlog","provider_name":"Service Control Manager","channel":"System","event_data":{"param1":"Software Protection","Binary":"7300700070007300760063002F0034000000","param2":"running"},"computer_name":"xxxxx.xxxxx.org","record_id":747052,"process":{"pid":580,"thread":{"id":19248}}},"message":"The Software Protection service entered the running state.","@version":"1"}]}
[2019-06-06T06:54:42,938][DEBUG][o.e.a.b.TransportShardBulkAction] [xxxxxxx] [winlogbeat-2019.06.06][0] failed to execute bulk item (index) index {[winlogbeat-2019.06.06][%{[type]}][fT1tLGsBel10KW7wMc3E], source[{"ecs":{"version":"1.0.0"},"agent":{"version":"7.0.0","id":"dc705780-781f-43ca-bcae-294e3397b5c0","ephemeral_id":"2c2326c0-53a0-45a1-8e9d-b8733f3f9c0b","hostname":"xxxxxx..xxxxx","type":"winlogbeat"},"event":{"created":"2019-06-06T11:19:31.067Z","kind":"event","code":7036},"@timestamp":"2019-06-06T11:16:23.772Z","log":{"level":"information"},"tags":["beats_input_codec_plain_applied"],"host":{"id":"f8a8e42d-61ad-4e3d-9590-dbd38d386b8f","hostname":"xxxxxxxx","architecture":"x86_64","name":"xxxxxxxxxxx","os":{"platform":"windows","kernel":"6.3.9600.19304 (winblue_ltsb_escrow.190305-1818)","build":"9600.19302","version":"6.3","family":"windows","name":"Windows Server 2012 R2 Standard"}},"winlog":{"provider_guid":"{555908d1-a6d7-4695-8e1e-26931d2012f4}","keywords":["Classic"],"event_id":7036,"task":"","api":"wineventlog","provider_name":"Service Control Manager","channel":"System","event_data":{"param1":"Software Protection","Binary":"7300700070007300760063002F0034000000","param2":"running"},"computer_name":"xxxxx.xxxxx.xxxxx.org","record_id":747152,"process":{"pid":580,"thread":{"id":18564}}},"message":"The Software Protection service entered the running state.","@version":"1"}]}