Hi everyone, my OS is centos7. I set a cluster and input data through logstash, but I found sometimes logsatsh can't connect to ES and this is the error warnning:
[2018-02-13T17:01:34,860][WARN ][logstash.outputs.elasticsearch] Marking url as dead. Last error: [LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError] Elasticsearch Unreachable: [http://163.19.163.XXX:9200/][Manticore::SocketTimeout] Read timed out {:url=>http://163.19.163.XXX:9200/, :error_message=>"Elasticsearch Unreachable: [http://163.19.163.XXX:9200/][Manticore::SocketTimeout] Read timed out", :error_class[2018-02-13T17:01:38,249][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://163.19.163.XXX:9200/, :path=>"/"}
[2018-02-13T17:01:38,250][WARN ][logstash.outputs.elasticsearch] Restored connection to ES instance {:url=>"http://163.19.163.XXX:9200/"}
this is my ES config:
# ---------------------------------- Network -----------------------------------
#
# Set the bind address to a specific IP (IPv4 or IPv6):
#
network.host: 163.19.163.XX
#
# Set a custom port for HTTP:
#
#http.port: 9200
#
# For more information, consult the network module documentation.
#
# --------------------------------- Discovery ----------------------------------
#
# Pass an initial list of hosts to perform discovery when new node is started:
# The default list of hosts is ["127.0.0.1", "[::1]"]
#
discovery.zen.ping.unicast.hosts: ["163.19.163.XX", "163.19.163.XX", "163.19.163.XX"]
#
# Prevent the "split brain" by configuring the majority of nodes (total number of master-eligible nodes / 2 + 1):
#
#discovery.zen.minimum_master_nodes: 3
#
# For more information, consult the zen discovery module documentation.
#
# ---------------------------------- Gateway -----------------------------------
#
# Block initial recovery after a full cluster restart until N nodes are started:
#
#gateway.recover_after_nodes: 3
#
# For more information, consult the gateway module documentation.
#
# ---------------------------------- Various -----------------------------------
#
# Require explicit names when deleting indices:
#
#action.destructive_requires_name: true
but if I input data to the pc of logstash itself there would have no error happen,when I connect to other ES and input data to them, then sometimes it would disconnect.
How can I avoid the error happen?
thank you in advance!