Hi, we are having logstash 5.6.3, our logstash config contains many filters, add field, geoip and also aggregate. It's long and complicated. We had to set pipeline.workers to 1 because of aggregate module.
But sometimes logstash get "stuck", doesn't parse any events and CPU usage is high:
If we restart it, it starts working again. The only error that is in log, is
[2018-05-03T14:40:37,226][ERROR][logstash.filters.ruby ] Ruby exception occurred: bad value for range
It doesn't says much...
Any idea what to do?