Elasticsearch Log4j File Producing an error

Elastic Stack Elasticsearch
1

Hello.

I have 3 cluster Elasticsearch node running on version 8.6.2- at the moment our nodes are constantly going down due to the errors taken from the log files below. Is anyone familiar with these messages?
ERROR: Elasticsearch exited unexpectedly
2024-11-15 13:49:28,182 main ERROR ECSJsonLayout contains an invalid element or attribute "pattern"
2024-11-15 13:49:28,225 main ERROR ECSJsonLayout contains invalid attributes "pattern", "type_name", "opensearchmessagefields"
2024-11-15 13:49:28,233 main ERROR ECSJsonLayout contains an invalid element or attribute "pattern"
2024-11-15 13:49:28,235 main ERROR ECSJsonLayout contains an invalid element or attribute "pattern"
2024-11-15 13:49:28,239 main ERROR Unable to locate appender "console" for logger config "root"
2024-11-15 13:49:28,239 main ERROR Unable to locate appender "rolling_old" for logger config "root"

2

Looks like you're using OpenSearch? Although OpenSearch and Elasticsearch share some common ancestry, they diverged some time ago and are now rather different products. Nobody with much OpenSearch expertise reads these forums so you'd be better off asking on an OpenSearch-specific forum.

1 Like
3

But the version seems to be 8.6.2. So may be there's a plugin or something which is not supported?

@ESuleman could you share the logs from the start and also explain a bit more your architecture?

4

Hmm yeah good point, 8.6.2 is not an OpenSearch version number indeed. Still, I don't see how we could have something called opensearchmessagefields here without at least some cross-contamination from an OpenSearch installation.