Logstash-filter-fingerprint failing intermittently

Elastic Stack Logstash
1

My pipeline starts up fine and eventually fails for this error, and has only happened twice in a long period of time, but I would like to understand what is the issue.

Getting the following error:

Pipeline worker error,
 the pipeline will be stopped {:pipeline_id=>"main",
 :error=>"(NameError) uninitialized constant LogStash::Filters::Fingerprint::OpenSSL",
 :exception=>Java::OrgJrubyExceptions::NameError,
 :backtrace=>["org.jruby.RubyModule.const_missing(org/jruby/RubyModule.java:3760)",
"RUBY.select_digest(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-fingerprint-3.2.2/lib/logstash/filters/fingerprint.rb:206)",
"usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_filter_minus_fingerprint_minus_3_dot_2_dot_2.lib.logstash.filters.fingerprint.fingerprint_openssl(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-fingerprint-3.2.2/lib/logstash/filters/fingerprint.rb:175)",
 "RUBY.filter(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-fingerprint-3.2.2/lib/logstash/filters/fingerprint.rb:132)",
"usr.share.logstash.logstash_minus_core.lib.logstash.filters.base.do_filter(/usr/share/logstash/logstash-core/lib/logstash/filters/base.rb:159)",
"usr.share.logstash.logstash_minus_core.lib.logstash.filters.base.multi_filter(/usr/share/logstash/logstash-core/lib/logstash/filters/base.rb:178)",
 "org.jruby.RubyArray.each(org/jruby/RubyArray.java:1809)",
"usr.share.logstash.logstash_minus_core.lib.logstash.filters.base.multi_filter(/usr/share/logstash/logstash-core/lib/logstash/filters/base.rb:175)",
"org.logstash.config.ir.compiler.AbstractFilterDelegatorExt.multi_filter(org/logstash/config/ir/compiler/AbstractFilterDelegatorExt.java:134)",
"usr.share.logstash.logstash_minus_core.lib.logstash.java_pipeline.start_workers(/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:295)"],
 :thread=>"#<Thread:0x650b5e95 sleep>"

I'm assuming the offending line is this one line in the pipeine's configuration given the error message

                fingerprint {
                    concatenate_all_fields => true
                    target => "id"
                    key => "id-key"
                }

Environment: CentOS7
ELK Stack version: 7.10
Java version: OpenJDK Runtime Environment (build 1.8.0_382-b05)
Logstash-filter-plugin version: 3.2.2

2

That is blowing up here. I cannot conceive of why that would intermittently fail. It should only get called when a new worker thread is created, which I thought only happens on startup.

3

@Badger sorry, I should clarify. This error does usually happen around the time of start up. The pipeline comes up initially and returns a 200, but then fails in the next 10-20 seconds. The intermittent part is that it doesn't always fail after start up. Most of the time, it's fine

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.