Logstash exeption "=>"undefined method `>' for nil:NilClass"

Elastic Stack Logstash
1

Hi all, I have a few filters. Some days I receive an errors :

[2018-08-03T07:38:53,905][ERROR][logstash.pipeline ] Exception in pipelineworker, the pipeline stopped processing new events,
_ please check your filter configuration and restart Logstash._
_ {"exception"=>"undefined method >' for nil:NilClass",_ _ "backtrace"=>["(eval):1981:ininitialize'",_
_ "org/jruby/RubyArray.java:1613:in each'",_ _ "(eval):1979:ininitialize'", "org/jruby/RubyProc.java:281:in call'", "(eval):1999:ininitialize'",_
_ "org/jruby/RubyArray.java:1613:in each'", "(eval):1993:ininitialize'",_
_ "org/jruby/RubyProc.java:281:in call'", "(eval):530:infilter_func'",_
_ "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:370:in filter_batch'",_ _ "org/jruby/RubyProc.java:281:incall'", "/usr/share/logstash/logstash-core/lib/logstash/util/wrapped_synchronous_queue.rb:224:in each'",_ _ "org/jruby/RubyHash.java:1342:ineach'", "/usr/share/logstash/logstash-core/lib/logstash/util/wrapped_synchronous_queue.rb:223:in each'",_ _ "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:369:infilter_batch'",_
_ "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:350:in worker_loop'",_ _ "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:317:instart_workers'"]}_

_ [2018-08-03T07:38:54,322][FATAL][logstash.runner ] An unexpected error occurred! {:error=>#<NoMethodError: undefined method >' for nil:NilClass>,_ _ :backtrace=>["(eval):1981:ininitialize'", "org/jruby/RubyArray.java:1613:in each'",_ _ "(eval):1979:ininitialize'", "org/jruby/RubyProc.java:281:in call'",_ _ "(eval):1999:ininitialize'", "org/jruby/RubyArray.java:1613:in each'",_ _ "(eval):1993:ininitialize'", "org/jruby/RubyProc.java:281:in call'",_ _ "(eval):530:infilter_func'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:370:in filter_batch'",_ _ "org/jruby/RubyProc.java:281:incall'", "/usr/share/logstash/logstash-core/lib/logstash/util/wrapped_synchronous_queue.rb:224:in each'",_ _ "org/jruby/RubyHash.java:1342:ineach'", "/usr/share/logstash/logstash-core/lib/logstash/util/wrapped_synchronous_queue.rb:223:in each'",_ _ "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:369:infilter_batch'",_
_ "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:350:in worker_loop'",_ _ "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:317:instart_workers'"]}_

From this messages I don't understand in what config may prevent for this erros ? Or maybe this errors occurs cause there are a lot of events in logstash queque?

2

Could you have a little more precision on your problem? show logstash.conf file

3

I have a lot of config files, and they are big :roll_eyes: Maybe there is the way to find what config is the causing of the error?

4

I revised all the configs and everything I found :

if [value] > 3
{
mutate
{
update => {"value" => 0}
}
}

so I corrected it like this :

if [value] and [value] > 3
{
mutate
{
update => {"value" => 0}
}
}

hope it helps

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.