Logstash-filter-elasticsearch - Cannot get new connection from pool

Hi, logstash-filter-elasticsearch throws this error on high load:

[2017-06-27T11:58:03,714][WARN ][logstash.filters.elasticsearch] Failed to query elasticsearch for previous event {:index=>"combine-inbound-2017.06.27", :query=>"ip:", :event=>2017-06-27T09:57:40.000Z %{message}, :error=>#<Elasticsearch::Transport::Transport::Error: Cannot get new connection from pool.>}

Logstash config:

elasticsearch {
hosts => ["localhost:9200"]
index => "combine-inbound-2017.06.27"
enable_sort => false
periodic_flush => true
query => "ip:%{[netflow][ipv4_src_addr]}"
fields => {"notes" => "alert"}

The server is already "tuned" for elasticsearch:


elasticsearch soft nofile 65535
elasticsearch hard nofile 65535
elasticsearch soft memlock unlimited
elasticsearch hard memlock unlimited

As this is a setup for testing, i am running just one node.

Has anyone an idea how to solve this or what to search for?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.