Logstash connectively issue to elasticsearch

Elastic Stack Logstash
1

[2020-04-30T00:45:37,515][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>400, :url=>"http://es-stage-c1-vip.xxxxxx.com:9200/_bulk"}
[2020-04-30T00:45:41,533][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>400, :url=>"http://es-stage-c1-vip.xxxxxx.com:9200/_bulk"}
[2020-04-30T00:45:49,557][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>400, :url=>"http://es-stage-c1-vip.xxxxxx.com:9200/_bulk"}
[2020-04-30T00:46:05,573][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>400, :url=>"http://es-stage-c1-vip.xxxxxx.com:9200/_bulk"}
[2020-04-30T00:46:37,588][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>400, :url=>"http://es-stage-c1-vip.xxxxxx.com:9200/_bulk"}
[2020-04-30T00:47:41,603][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>400, :url=>"http://es-stage-c1-vip.xxxxxx.com:9200/_bulk"}
[2020-04-30T00:48:45,617][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>400, :url=>"http://es-stage-c1-vip.xxxxxx.com:9200/_bulk"}
[2020-04-30T00:49:49,630][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>400, :url=>"http://es-stage-c1-vip.xxxxxx.com:9200/_bulk"}
[2020-04-30T00:50:53,643][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>400, :url=>"http://es-stage-c1-vip.xxxxxx.com:9200/_bulk"}
[2020-04-30T00:51:57,658][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>400, :url=>"http://es-stage-c1-vip.xxxxxx.com:9200/_bulk"}
[2020-04-30T00:53:01,670][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>400, :url=>"http://es-stage-c1-vip.xxxxxx.com:9200/_bulk"}
[2020-04-30T00:54:05,682][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>400, :url=>"http://es-stage-c1-vip.xxxxxx.com:9200/_bulk"}
[2020-04-30T00:55:09,694][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error.
I killed the job and restarted after deleting the queue "to_elasticsearch.queue" to work.

Will Retry with exponential backoff {:code=>400, :url=>"http://es-stage-c1-vip.xxxxxx.com:9200/_bulk"}
[2020-04-30T00:56:13,707][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>400, :url=>"http://es-stage-c1-vip.xxxxxx.com:9200/_bulk"}
[2020-04-30T00:57:17,720][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>400, :url=>"http://es-stage-c1-vip.xxxxxx.com:9200/_bulk"}

2

Error 400 can be a mapping error.

Please check the Logstash logs setting them to debug or the Elasticsearch logs and share them with us.

3

How to upload the logs

4

Please use https://pastebin.com/ or https://gist.github.com/

5

CDF-search-stg-c1.log

to_elasticsearch.hrof

6

Can you make those files public? I do not want to share my private email.

7


Luca_Belluccini

      Elastic Team Member




    April 30

Error 400 can be a mapping error.

Please check the Logstash logs setting them to debug or the Elasticsearch logs and share them with us.

Visit Topic or reply to this email to respond.

To unsubscribe from these emails, click here.

(Attachment logs.7z is missing)

8

to_elasticsearch.log1

logstash log

9

@hello4usharath please make the drive docs you've shared public.
The links you've shared require to be logged in on Google.

10



11

Hello @hello4usharath

You seem to have a subscription with Elastic Support.

Would you mind opening a ticket via the support portal as Severity 3 given the system is non-production?

12

Already openned a ticket

13

We need a urgent support , We have planned for upgrade of elasticsearch & logstash this week end

14

Hello @hello4usharath the support will continue to troubleshoot the issue in the case you've opened. Please provide the cluster diagnostic, the logs on the ticket you've already opened.

15

All details have been provided

16

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.