# Facing problem with Elasticsearch and lumberjack setup **URL:** \ **Category:** Elasticsearch\ **Created:** [July 10, 2014, 6:22am UTC](https://discuss.elastic.co/t/facing-problem-with-elasticsearch-and-lumberjack-setup/18567 "2014-07-10T06:22:25Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Gaurav\_Sharma](https://avatars.discourse-cdn.com/v4/letter/g/87869e/32.png) [@Gaurav\_Sharma](https://discuss.elastic.co/u/Gaurav_Sharma)\ **Post date:** [July 10, 2014, 6:22am UTC](https://discuss.elastic.co/t/facing-problem-with-elasticsearch-and-lumberjack-setup/18567/1 "2014-07-10T06:22:25Z")
Hi, We are trying to setup ELK stack , with logstash-forwarder. Size of elasticsearch indexes increase by 25 -30 GB . It stops working after a day or 2 , and now it is throwing this error: Exception in thread "Ruby-0-Thread-11591: /home/kadmin/logstash/logstash-1.4.1/vendor/bundle/jruby/1.9/gems/jls-lumberjack-0.0.20/lib/lumberjack/server.rb:58" java.lang.ArrayIndexOutOfBoundsException at org.jruby.ext.zlib.JZlibInflate.run(JZlibInflate.java:262) at org.jruby.ext.zlib.JZlibInflate.internalFinish(JZlibInflate.java:308) at org.jruby.ext.zlib.ZStream.finish(ZStream.java:134) at org.jruby.ext.zlib.JZlibInflate.s\_inflate(JZlibInflate.java:72) at org.jruby.ext.zlib.JZlibInflate$INVOKER$s$1$0$s\_inflate.call(JZlibInflate$INVOKER$s$1$0$s\_inflate.gen) at org.jruby.runtime.callsite.CachingCallSite.call(CachingCallSite.java:168) at rubyjit.Lumberjack::Parser$$compressed\_payload\_5519163418dc1b26e6f84f1d8d5e9e8396cd7536793498833. **file** (/home/kadmin/logstash/logstash-1.4.1/vendor/bundle/jruby/1.9/gems/jls-lumberjack-0.0.20/lib/lumberjack/server.rb:194) at rubyjit.Lumberjack::Parser$$compressed\_payload\_5519163418dc1b26e6f84f1d8d5e9e8396cd7536793498833. **file** (/home/kadmin/logstash/logstash-1.4.1/vendor/bundle/jruby/1.9/gems/jls-lumberjack-0.0.20/lib/lumberjack/server.rb) -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/88c03f8a-4192-4598-9085-0e2565474935%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/88c03f8a-4192-4598-9085-0e2565474935%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [July 10, 2014, 6:31am UTC](https://discuss.elastic.co/t/facing-problem-with-elasticsearch-and-lumberjack-setup/18567/2 "2014-07-10T06:31:01Z")
You will want to ask that on the logstash list, as it's related to that code base and not elasticsearch. Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: [markw@campaignmonitor.com](mailto:markw@campaignmonitor.com) web: [www.campaignmonitor.com](http://www.campaignmonitor.com) On 10 July 2014 16:22, Gaurav Sharma [gaurav.sharma@eng.knowlarity.com](mailto:gaurav.sharma@eng.knowlarity.com) wrote: > Hi, > > We are trying to setup ELK stack , with logstash-forwarder. Size of > elasticsearch indexes increase by 25 -30 GB . It stops working after a day > or 2 , and now it is throwing this error: > > Exception in thread "Ruby-0-Thread-11591: > /home/kadmin/logstash/logstash-1.4.1/vendor/bundle/jruby/1.9/gems/jls-lumberjack-0.0.20/lib/lumberjack/server.rb:58" > java.lang.ArrayIndexOutOfBoundsException > at org.jruby.ext.zlib.JZlibInflate.run(JZlibInflate.java:262) > at > org.jruby.ext.zlib.JZlibInflate.internalFinish(JZlibInflate.java:308) > at org.jruby.ext.zlib.ZStream.finish(ZStream.java:134) > at org.jruby.ext.zlib.JZlibInflate.s\_inflate(JZlibInflate.java:72) > at > org.jruby.ext.zlib.JZlibInflate$INVOKER$s$1$0$s\_inflate.call(JZlibInflate$INVOKER$s$1$0$s\_inflate.gen) > at > org.jruby.runtime.callsite.CachingCallSite.call(CachingCallSite.java:168) > at > rubyjit.Lumberjack::Parser$$compressed\_payload\_5519163418dc1b26e6f84f1d8d5e9e8396cd7536793498833. **file** (/home/kadmin/logstash/logstash-1.4.1/vendor/bundle/jruby/1.9/gems/jls-lumberjack-0.0.20/lib/lumberjack/server.rb:194) > at > rubyjit.Lumberjack::Parser$$compressed\_payload\_5519163418dc1b26e6f84f1d8d5e9e8396cd7536793498833. **file** (/home/kadmin/logstash/logstash-1.4.1/vendor/bundle/jruby/1.9/gems/jls-lumberjack-0.0.20/lib/lumberjack/server.rb) > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/88c03f8a-4192-4598-9085-0e2565474935%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/88c03f8a-4192-4598-9085-0e2565474935%40googlegroups.com) > [https://groups.google.com/d/msgid/elasticsearch/88c03f8a-4192-4598-9085-0e2565474935%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/88c03f8a-4192-4598-9085-0e2565474935%40googlegroups.com?utm_medium=email&utm_source=footer) > . > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEM624b38k%3DxxbxuLktB5nSWHX8QCb82NTAFtfqbOX%3D8ZomNMQ%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEM624b38k%3DxxbxuLktB5nSWHX8QCb82NTAFtfqbOX%3D8ZomNMQ%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:16am UTC](https://discuss.elastic.co/t/facing-problem-with-elasticsearch-and-lumberjack-setup/18567/3 "2017-07-06T01:16:53Z")
Closed on July 6, 2017, 1:16am UTC