Getting _groktimeout


(Amit) #1

Hi,

I have ingest logs and in kibana some of logs getting _groktimeout in tags. Any idea to solve this error?

Thanks!


(Jon Budzenski) #2

This is coming from logstash, it's taking too long for it to process a message.

You can try bumping the timeout, see https://www.elastic.co/guide/en/logstash/5.5/plugins-filters-grok.html#plugins-filters-grok-timeout_millis. With that said 30+ seconds is a long time to process a message. It's probably worth trying to optimize the grok expression and checking overall logstash load.


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.