Logstash 2.4.1 silently fails if using 2 outputs

If I try to use two outputs:

output {

  elasticsearch {
    hosts => ["", ""]

  if "prod" in [tags] {
    udp {
      host => ""
      port => 6177


logstash works ~10-15 min and silently stops without any error messages in logs.
CPU spikes up to 50-60% before failure.
Single elasticsearch output is working fine.


Can you share your logstash.yml, CPU, as well as how much RAM the logstash server has.
Presumably worker usage is spiking and then failing after some time, debug logging may show more:
--debug - https://www.elastic.co/guide/en/logstash/2.4/command-line-flags.html

This is always handy: https://www.elastic.co/guide/en/logstash/2.4/performance-troubleshooting.html

It seems that this version doesn't have logstash.yml by default.
The box has 8Gb RAM and 4Gb for JVM heap
Unfortunately, this is a production system, and I'm limited in experimenting with debugging options. And the problem is not reproducible in dev.
But I'll try to play with worker settings from your link, thank you.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.