# Logstash crashed randomly (XML plugin) **URL:** \ **Category:** Logstash\ **Created:** [December 13, 2019, 8:55am UTC](https://discuss.elastic.co/t/logstash-crashed-randomly-xml-plugin/211767 "2019-12-13T08:55:14Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![Ged](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ged/32/65761_2.png) [@Ged](https://discuss.elastic.co/u/Ged)\ **Post date:** [December 13, 2019, 8:55am UTC](https://discuss.elastic.co/t/logstash-crashed-randomly-xml-plugin/211767/1 "2019-12-13T08:55:14Z")
Hi Team, It happens from time to time (i cannot find a rule) that Logstash (v. 7.4.0) crashes with error below. In previously used version (6.3.1) i didn't notice such a problem. Could you please help ? Why this exception is not caught a stops Logstash ? Thanks in advance ! ``` [2019-12-12T16:01:06,674][ERROR][org.logstash.execution.WorkerLoop][as-log-payload] Exception in pipelineworker, the pipeline stopped processing new events, please check your filter configuration and restart Logstash. org.w3c.dom.DOMException: NAMESPACE_ERR: An attempt is made to create or change an object in a way which is incorrect with regard to namespaces. at org.apache.xerces.dom.CoreDocumentImpl.checkNamespaceWF(Unknown Source) ~[xercesImpl.jar:?] at org.apache.xerces.dom.AttrNSImpl.setName(Unknown Source) ~[xercesImpl.jar:?] at org.apache.xerces.dom.AttrNSImpl.rename(Unknown Source) ~[xercesImpl.jar:?] at org.apache.xerces.dom.CoreDocumentImpl.renameNode(Unknown Source) ~[xercesImpl.jar:?] at nokogiri.internals.NokogiriHelpers.renameNode(NokogiriHelpers.java:792) ~[nokogiri.jar:?] at nokogiri.XmlDocument.removeNamespceRecursively(XmlDocument.java:374) ~[nokogiri.jar:?] at nokogiri.XmlDocument.removeNamespceRecursively(XmlDocument.java:381) ~[nokogiri.jar:?] at nokogiri.XmlDocument.removeNamespceRecursively(XmlDocument.java:381) ~[nokogiri.jar:?] at nokogiri.XmlDocument.removeNamespceRecursively(XmlDocument.java:381) ~[nokogiri.jar:?] at nokogiri.XmlDocument.removeNamespceRecursively(XmlDocument.java:381) ~[nokogiri.jar:?] at nokogiri.XmlDocument.removeNamespceRecursively(XmlDocument.java:381) ~[nokogiri.jar:?] at nokogiri.XmlDocument.removeNamespceRecursively(XmlDocument.java:381) ~[nokogiri.jar:?] at nokogiri.XmlDocument.remove_namespaces(XmlDocument.java:356) ~[nokogiri.jar:?] at apps.elk.logstash_minus_7_dot_4_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_filter_minus_xml_minus_4_dot_0_dot_7.lib.logstash.filters.xml.RUBY$method$filter$0(/apps/elk/logstash-7.4.0/vendor/bundle/jruby/2.5.0/gems/logstash-filter-xml-4.0.7/lib/logstash/filters/xml.rb:150) ~[?:?] at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:117) ~[jruby-complete-9.2.8.0.jar:?] at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:156) ~[jruby-complete-9.2.8.0.jar:?] at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:253) ~[jruby-complete-9.2.8.0.jar:?] at apps.elk.logstash_minus_7_dot_4_dot_0.logstash_minus_core.lib.logstash.filters.base.RUBY$method$do_filter$0(/apps/elk/logstash-7.4.0/logstash-core/lib/logstash/filters/base.rb:143) ~[?:?] at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:117) ~[jruby-complete-9.2.8.0.jar:?] at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:156) ~[jruby-complete-9.2.8.0.jar:?] at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:253) ~[jruby-complete-9.2.8.0.jar:?] at apps.elk.logstash_minus_7_dot_4_dot_0.logstash_minus_core.lib.logstash.filters.base.RUBY$block$multi_filter$1(/apps/elk/logstash-7.4.0/logstash-core/lib/logstash/filters/base.rb:162) ~[?:?] at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) ~[jruby-complete-9.2.8.0.jar:?] at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) ~[jruby-complete-9.2.8.0.jar:?] at org.jruby.runtime.Block.yield(Block.java:170) ~[jruby-complete-9.2.8.0.jar:?] at org.jruby.RubyArray.each(RubyArray.java:1800) ~[jruby-complete-9.2.8.0.jar:?] at apps.elk.logstash_minus_7_dot_4_dot_0.logstash_minus_core.lib.logstash.filters.base.RUBY$method$multi_filter$0(/apps/elk/logstash-7.4.0/logstash-core/lib/logstash/filters/base.rb:159) ~[?:?] at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:117) ~[jruby-complete-9.2.8.0.jar:?] at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:156) ~[jruby-complete-9.2.8.0.jar:?] at org.jruby.internal.runtime.methods.DynamicMethod.call(DynamicMethod.java:200) ~[jruby-complete-9.2.8.0.jar:?] at org.logstash.config.ir.compiler.FilterDelegatorExt.doMultiFilter(FilterDelegatorExt.java:99) ~[logstash-core.jar:?] at org.logstash.config.ir.compiler.AbstractFilterDelegatorExt.multiFilter(AbstractFilterDelegatorExt.java:115) ~[logstash-core.jar:?] at org.logstash.generated.CompiledDataset23.compute(Unknown Source) ~[?:?] at org.logstash.generated.CompiledDataset24.compute(Unknown Source) ~[?:?] at org.logstash.generated.CompiledDataset28.compute(Unknown Source) ~[?:?] at org.logstash.generated.CompiledDataset29.compute(Unknown Source) ~[?:?] at org.logstash.generated.CompiledDataset32.compute(Unknown Source) ~[?:?] at org.logstash.execution.WorkerLoop.run(WorkerLoop.java:64) [logstash-core.jar:?] at sun.reflect.GeneratedMethodAccessor100.invoke(Unknown Source) ~[?:?] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_211] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_211] at org.jruby.javasupport.JavaMethod.invokeDirectWithExceptionHandling(JavaMethod.java:440) [jruby-complete-9.2.8.0.jar:?] at org.jruby.javasupport.JavaMethod.invokeDirect(JavaMethod.java:304) [jruby-complete-9.2.8.0.jar:?] at org.jruby.java.invokers.InstanceMethodInvoker.call(InstanceMethodInvoker.java:36) [jruby-complete-9.2.8.0.jar:?] at apps.elk.logstash_minus_7_dot_4_dot_0.logstash_minus_core.lib.logstash.java_pipeline.RUBY$block$start_workers$2(/apps/elk/logstash-7.4.0/logstash-core/lib/logstash/java_pipeline.rb:243) [jruby-complete-9.2.8.0.jar:?] at org.jruby.runtime.CompiledIRBlockBody.callDirect(CompiledIRBlockBody.java:136) [jruby-complete-9.2.8.0.jar:?] at org.jruby.runtime.IRBlockBody.call(IRBlockBody.java:77) [jruby-complete-9.2.8.0.jar:?] at org.jruby.runtime.Block.call(Block.java:129) [jruby-complete-9.2.8.0.jar:?] at org.jruby.RubyProc.call(RubyProc.java:295) [jruby-complete-9.2.8.0.jar:?] at org.jruby.RubyProc.call(RubyProc.java:274) [jruby-complete-9.2.8.0.jar:?] at org.jruby.RubyProc.call(RubyProc.java:270) [jruby-complete-9.2.8.0.jar:?] at org.jruby.internal.runtime.RubyRunnable.run(RubyRunnable.java:105) [jruby-complete-9.2.8.0.jar:?] at java.lang.Thread.run(Thread.java:748) [?:1.8.0_211] [2019-12-12T16:01:07,040][FATAL][logstash.runner] An unexpected error occurred! {:error=>java.lang.IllegalStateException: org.w3c.dom.DOMException: NAMESPACE_ERR: An attempt is made to create or change an object in a way which is incorrect with regard to namespaces., :backtrace=>["org.logstash.execution.WorkerLoop.run(org/logstash/execution/WorkerLoop.java:85)", "java.lang.reflect.Method.invoke(java/lang/reflect/Method.java:498)", "org.jruby.javasupport.JavaMethod.invokeDirectWithExceptionHandling(org/jruby/javasupport/JavaMethod.java:440)", "org.jruby.javasupport.JavaMethod.invokeDirect(org/jruby/javasupport/JavaMethod.java:304)", "apps.elk.logstash_minus_7_dot_4_dot_0.logstash_minus_core.lib.logstash.java_pipeline.start_workers(/apps/elk/logstash-7.4.0/logstash-core/lib/logstash/java_pipeline.rb:243)", "org.jruby.RubyProc.call(org/jruby/RubyProc.java:295)", "org.jruby.RubyProc.call(org/jruby/RubyProc.java:274)", "org.jruby.RubyProc.call(org/jruby/RubyProc.java:270)", "java.lang.Thread.run(java/lang/Thread.java:748)"]} [2019-12-12T16:01:07,738][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit ``` ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 10, 2020, 8:55am UTC](https://discuss.elastic.co/t/logstash-crashed-randomly-xml-plugin/211767/2 "2020-01-10T08:55:14Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.