Logstash 2.4.1 silently fails if using 2 outputs

[sloniki]

If I try to use two outputs:

output {

  elasticsearch {
    hosts => ["192.168.1.1", "192.168.1.2"]
  }

  if "prod" in [tags] {
    udp {
      host => "192.168.1.3"
      port => 6177
    }
  }

}

logstash works ~10-15 min and silently stops without any error messages in logs.
CPU spikes up to 50-60% before failure.
Single elasticsearch output is working fine.

[JKhondhu (Jymit Singh Khondhu)]

Hi,

Can you share your logstash.yml, CPU, as well as how much RAM the logstash server has.
Presumably worker usage is spiking and then failing after some time, debug logging may show more:
--debug - https://www.elastic.co/guide/en/logstash/2.4/command-line-flags.html

This is always handy: https://www.elastic.co/guide/en/logstash/2.4/performance-troubleshooting.html

[sloniki]

It seems that this version doesn't have logstash.yml by default.
The box has 8Gb RAM and 4Gb for JVM heap
-Xmx4g
Unfortunately, this is a production system, and I'm limited in experimenting with debugging options. And the problem is not reproducible in dev.
But I'll try to play with worker settings from your link, thank you.