Facing problem with Elasticsearch and lumberjack setup


(Gaurav Sharma) #1

Hi,

We are trying to setup ELK stack , with logstash-forwarder. Size of
elasticsearch indexes increase by 25 -30 GB . It stops working after a day
or 2 , and now it is throwing this error:

Exception in thread "Ruby-0-Thread-11591:
/home/kadmin/logstash/logstash-1.4.1/vendor/bundle/jruby/1.9/gems/jls-lumberjack-0.0.20/lib/lumberjack/server.rb:58"
java.lang.ArrayIndexOutOfBoundsException
at org.jruby.ext.zlib.JZlibInflate.run(JZlibInflate.java:262)
at
org.jruby.ext.zlib.JZlibInflate.internalFinish(JZlibInflate.java:308)
at org.jruby.ext.zlib.ZStream.finish(ZStream.java:134)
at org.jruby.ext.zlib.JZlibInflate.s_inflate(JZlibInflate.java:72)
at
org.jruby.ext.zlib.JZlibInflate$INVOKER$s$1$0$s_inflate.call(JZlibInflate$INVOKER$s$1$0$s_inflate.gen)
at
org.jruby.runtime.callsite.CachingCallSite.call(CachingCallSite.java:168)
at
rubyjit.Lumberjack::Parser$$compressed_payload_5519163418dc1b26e6f84f1d8d5e9e8396cd7536793498833.file(/home/kadmin/logstash/logstash-1.4.1/vendor/bundle/jruby/1.9/gems/jls-lumberjack-0.0.20/lib/lumberjack/server.rb:194)
at
rubyjit.Lumberjack::Parser$$compressed_payload_5519163418dc1b26e6f84f1d8d5e9e8396cd7536793498833.file(/home/kadmin/logstash/logstash-1.4.1/vendor/bundle/jruby/1.9/gems/jls-lumberjack-0.0.20/lib/lumberjack/server.rb)

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/88c03f8a-4192-4598-9085-0e2565474935%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


(Mark Walkom) #2

You will want to ask that on the logstash list, as it's related to that
code base and not elasticsearch.

Regards,
Mark Walkom

Infrastructure Engineer
Campaign Monitor
email: markw@campaignmonitor.com
web: www.campaignmonitor.com

On 10 July 2014 16:22, Gaurav Sharma gaurav.sharma@eng.knowlarity.com
wrote:

Hi,

We are trying to setup ELK stack , with logstash-forwarder. Size of
elasticsearch indexes increase by 25 -30 GB . It stops working after a day
or 2 , and now it is throwing this error:

Exception in thread "Ruby-0-Thread-11591:
/home/kadmin/logstash/logstash-1.4.1/vendor/bundle/jruby/1.9/gems/jls-lumberjack-0.0.20/lib/lumberjack/server.rb:58"
java.lang.ArrayIndexOutOfBoundsException
at org.jruby.ext.zlib.JZlibInflate.run(JZlibInflate.java:262)
at
org.jruby.ext.zlib.JZlibInflate.internalFinish(JZlibInflate.java:308)
at org.jruby.ext.zlib.ZStream.finish(ZStream.java:134)
at org.jruby.ext.zlib.JZlibInflate.s_inflate(JZlibInflate.java:72)
at
org.jruby.ext.zlib.JZlibInflate$INVOKER$s$1$0$s_inflate.call(JZlibInflate$INVOKER$s$1$0$s_inflate.gen)
at
org.jruby.runtime.callsite.CachingCallSite.call(CachingCallSite.java:168)
at
rubyjit.Lumberjack::Parser$$compressed_payload_5519163418dc1b26e6f84f1d8d5e9e8396cd7536793498833.file(/home/kadmin/logstash/logstash-1.4.1/vendor/bundle/jruby/1.9/gems/jls-lumberjack-0.0.20/lib/lumberjack/server.rb:194)
at
rubyjit.Lumberjack::Parser$$compressed_payload_5519163418dc1b26e6f84f1d8d5e9e8396cd7536793498833.file(/home/kadmin/logstash/logstash-1.4.1/vendor/bundle/jruby/1.9/gems/jls-lumberjack-0.0.20/lib/lumberjack/server.rb)

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/88c03f8a-4192-4598-9085-0e2565474935%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/88c03f8a-4192-4598-9085-0e2565474935%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAEM624b38k%3DxxbxuLktB5nSWHX8QCb82NTAFtfqbOX%3D8ZomNMQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


(system) #3