Elasticsearch: failed to execute bulk item (index) index

Hi All,

All of sudden, I am getting this error in elastic_logs. Haven't made any changes. Also, the heap size is set to 8 gb :
-Xms8g
-Xmx8g

Logs: -
[2019-06-06T06:54:42,935][DEBUG][o.e.a.b.TransportShardBulkAction] [xxxxxxxxx] [winlogbeat-2019.06.06][0] failed to execute bulk item (index) index {[winlogbeat-2019.06.06][%{[type]}][Bz1tLGsBel10KW7wMc2l], source[{"agent":{"version":"7.0.0","id":"dc705780-781f-43ca-bcae-294e3397b5c0","ephemeral_id":"2c2326c0-53a0-45a1-8e9d-b8733f3f9c0b","hostname":"xxxxxxxxxx","type":"winlogbeat"},"ecs":{"version":"1.0.0"},"event":{"created":"2019-06-06T11:19:31.050Z","kind":"event","code":7036},"@timestamp":"2019-06-06T10:15:14.920Z","log":{"level":"information"},"tags":["beats_input_codec_plain_applied"],"host":{"id":"f8a8e42d-61ad-4e3d-9590-dbd38d386b8f","hostname":"xxxxxxxx","architecture":"x86_64","name":"xxxxxxxxxxx","os":{"platform":"windows","kernel":"6.3.9600.19304 (winblue_ltsb_escrow.190305-1818)","build":"9600.19302","version":"6.3","family":"windows","name":"Windows Server 2012 R2 Standard"}},"winlog":{"provider_guid":"{555908d1-a6d7-4695-8e1e-26931d2012f4}","keywords":["Classic"],"event_id":7036,"task":"","api":"wineventlog","provider_name":"Service Control Manager","channel":"System","event_data":{"param1":"Software Protection","Binary":"7300700070007300760063002F0034000000","param2":"running"},"computer_name":"xxxxx.xxxxx.org","record_id":747052,"process":{"pid":580,"thread":{"id":19248}}},"message":"The Software Protection service entered the running state.","@version":"1"}]}
[2019-06-06T06:54:42,938][DEBUG][o.e.a.b.TransportShardBulkAction] [xxxxxxx] [winlogbeat-2019.06.06][0] failed to execute bulk item (index) index {[winlogbeat-2019.06.06][%{[type]}][fT1tLGsBel10KW7wMc3E], source[{"ecs":{"version":"1.0.0"},"agent":{"version":"7.0.0","id":"dc705780-781f-43ca-bcae-294e3397b5c0","ephemeral_id":"2c2326c0-53a0-45a1-8e9d-b8733f3f9c0b","hostname":"xxxxxx..xxxxx","type":"winlogbeat"},"event":{"created":"2019-06-06T11:19:31.067Z","kind":"event","code":7036},"@timestamp":"2019-06-06T11:16:23.772Z","log":{"level":"information"},"tags":["beats_input_codec_plain_applied"],"host":{"id":"f8a8e42d-61ad-4e3d-9590-dbd38d386b8f","hostname":"xxxxxxxx","architecture":"x86_64","name":"xxxxxxxxxxx","os":{"platform":"windows","kernel":"6.3.9600.19304 (winblue_ltsb_escrow.190305-1818)","build":"9600.19302","version":"6.3","family":"windows","name":"Windows Server 2012 R2 Standard"}},"winlog":{"provider_guid":"{555908d1-a6d7-4695-8e1e-26931d2012f4}","keywords":["Classic"],"event_id":7036,"task":"","api":"wineventlog","provider_name":"Service Control Manager","channel":"System","event_data":{"param1":"Software Protection","Binary":"7300700070007300760063002F0034000000","param2":"running"},"computer_name":"xxxxx.xxxxx.xxxxx.org","record_id":747152,"process":{"pid":580,"thread":{"id":18564}}},"message":"The Software Protection service entered the running state.","@version":"1"}]}

Hi,

Do you have more log because there is no reason explain in the trace.

bye,
Xavier

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.