Logstash getting auto-restarted very frequently


(max) #1

I am using UDP input & output plugin and codec => json_lines . Since few days I am observing that my logstash process is getting restarted every few minutes and below error is noted in the logstash logs. Any one else faced this issue earlier and resolved it. Please help.

[2017-10-12T18:25:57,890][FATAL][logstash.runner ] An unexpected error occurred! {:error=>#<SocketError: send: name or service not known>, :backtrace=>["org/jruby/ext/socket/RubyUDPSocket.java:322:in send'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-udp-3.0.3/lib/logstash/outputs/udp.rb:24:inregister'", "org/jruby/RubyProc.java:281:in call'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-codec-json_lines-3.0.3/lib/logstash/codecs/json_lines.rb:48:inencode'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-udp-3.0.3/lib/logstash/outputs/udp.rb:31:in receive'", "/usr/share/logstash/logstash-core/lib/logstash/outputs/base.rb:92:inmulti_receive'", "org/jruby/RubyArray.java:1613:in each'", "/usr/share/logstash/logstash-core/lib/logstash/outputs/base.rb:92:inmulti_receive'", "/usr/share/logstash/logstash-core/lib/logstash/output_delegator_strategies/legacy.rb:22:in multi_receive'", "/usr/share/logstash/logstash-core/lib/logstash/output_delegator.rb:47:inmulti_receive'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:420:in output_batch'", "org/jruby/RubyHash.java:1342:ineach'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:419:in output_batch'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:365:inworker_loop'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:330:in `start_workers'"]}


(max) #2

Can someone help me on this please. May be this issue has been posted already in the forum in the past which I can't find , but if anyone can provide the cause & solution, it will be a great help.


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.