# Logstash日志里频繁出现报错""undefined method \`sanitized' "

**URL:** <https://discuss.elastic.co/t/logstash-undefined-method-sanitized/160079>\
**Category:** 中文提问与讨论\
**Created:** [December 10, 2018, 2:10am UTC](https://discuss.elastic.co/t/logstash-undefined-method-sanitized/160079 "2018-12-10T02:10:03Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![haoyun](https://avatars.discourse-cdn.com/v4/letter/h/45deac/32.png) [@haoyun](https://discuss.elastic.co/u/haoyun)\
**Post date:** [December 10, 2018, 2:10am UTC](https://discuss.elastic.co/t/logstash-undefined-method-sanitized/160079/1 "2018-12-10T02:10:03Z")

</div>

你好，  
我的elk版本是5.6，logstash日志里频繁出现报错""undefined method `sanitized' "

每次，刚开始启动的时候是一切正常的，然后慢慢就会出现下面这种报错，积攒到某一天，就会发现不往elastic里写索引数据了。这时候产看日志每天会有7 、 8 M都是刷这个错误。  
然后我重启logstash就看似又恢复正常了！

有没有什么好的解决办法？日志内容如下：

[2018-12-07T06:02:38,323][ERROR][logstash.outputs.elasticsearch] Encountered an unexpected error submitting a bulk request! Will retry. {:error\_message=\>"undefined method `sanitized' for \"http://10.0.67.7:9222/_bulk\":String", :class=>"NoMethodError", :backtrace=>["/rmp/logstash-5.6.1/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.4.0-java/lib/logstash/outputs/elasticsearch/common.rb:249:in`safe\_bulk'", "/rmp/logstash-5.6.1/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.4.0-java/lib/logstash/outputs/elasticsearch/common.rb:222:in `safe_bulk'", "/rmp/logstash-5.6.1/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.4.0-java/lib/logstash/outputs/elasticsearch/common.rb:119:in`submit'", "/rmp/logstash-5.6.1/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.4.0-java/lib/logstash/outputs/elasticsearch/common.rb:87:in `retrying_submit'", "/rmp/logstash-5.6.1/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-7.4.0-java/lib/logstash/outputs/elasticsearch/common.rb:38:in`multi\_receive'", "/rmp/logstash-5.6.1/logstash-core/lib/logstash/output\_delegator\_strategies/shared.rb:13:in `multi_receive'", "/rmp/logstash-5.6.1/logstash-core/lib/logstash/output_delegator.rb:49:in`multi\_receive'", "/rmp/logstash-5.6.1/logstash-core/lib/logstash/pipeline.rb:436:in `output_batch'", "org/jruby/RubyHash.java:1342:in`each'", "/rmp/logstash-5.6.1/logstash-core/lib/logstash/pipeline.rb:435:in `output_batch'", "/rmp/logstash-5.6.1/logstash-core/lib/logstash/pipeline.rb:381:in`worker\_loop'", "/rmp/logstash-5.6.1/logstash-core/lib/logstash/pipeline.rb:342:in `start\_workers'"]}

---

<div class="post-metadata">

**Author:** ![medcl.net](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/medcl.net/32/4414_2.png) [@medcl.net](https://discuss.elastic.co/u/medcl.net)\
**Post date:** [December 20, 2018, 1:34am UTC](https://discuss.elastic.co/t/logstash-undefined-method-sanitized/160079/2 "2018-12-20T01:34:28Z")

</div>

> [@haoyun](#):
>
> undefined method `sanitized'

应该和这个问题是一样的：

> [@Undefined method \`sanitized'](https://discuss.elastic.co/t/undefined-method-sanitized/100588/8):
>
> I could not find the solution but have a workaround for this. I have fresh installation of logstash 5.6.3 and using logstash-output-elasticsearch plugin version 9.0.0(upgraded from 7.4.2) Error: [2017-10-11T06:52:46,492][ERROR][logstash.outputs.elasticsearch] Encountered an unexpected error submitting a bulk request! Will retry. {:error\_message=\>"undefined method sanitized' for \"/\_bulk\":String", :cl ass=\>"NoMethodError", :backtrace=\>["/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash…

你看看是不是配置的用户名权限不够。

---

<div class="post-metadata">

**Author:** ![haoyun](https://avatars.discourse-cdn.com/v4/letter/h/45deac/32.png) [@haoyun](https://discuss.elastic.co/u/haoyun)\
**Post date:** [December 20, 2018, 1:48am UTC](https://discuss.elastic.co/t/logstash-undefined-method-sanitized/160079/3 "2018-12-20T01:48:08Z")

</div>

我用的超级用户。关键是刚启动会正常运行一段时间 ~~~~

---

<div class="post-metadata">

**Author:** ![medcl.net](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/medcl.net/32/4414_2.png) [@medcl.net](https://discuss.elastic.co/u/medcl.net)\
**Post date:** [December 20, 2018, 2:39am UTC](https://discuss.elastic.co/t/logstash-undefined-method-sanitized/160079/4 "2018-12-20T02:39:28Z")

</div>

不是运行的用户，你的 es 有没有设置权限？

---

<div class="post-metadata">

**Author:** ![haoyun](https://avatars.discourse-cdn.com/v4/letter/h/45deac/32.png) [@haoyun](https://discuss.elastic.co/u/haoyun)\
**Post date:** [December 20, 2018, 2:58am UTC](https://discuss.elastic.co/t/logstash-undefined-method-sanitized/160079/5 "2018-12-20T02:58:05Z")

</div>

您说的是这个吗？  
elasticsearch {  
hosts =\> ["10.0.67.7:9222"]  
index =\> "aop-xq-%{+YYYY.MM}"  
user =\> "elastic"  
password =\> "changeme"  
}

---

<div class="post-metadata">

**Author:** ![medcl.net](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/medcl.net/32/4414_2.png) [@medcl.net](https://discuss.elastic.co/u/medcl.net)\
**Post date:** [December 24, 2018, 2:23am UTC](https://discuss.elastic.co/t/logstash-undefined-method-sanitized/160079/6 "2018-12-24T02:23:56Z")

</div>

是的，这里的 elastic 用户是不是权限有问题。

---

<div class="post-metadata">

**Author:** ![haoyun](https://avatars.discourse-cdn.com/v4/letter/h/45deac/32.png) [@haoyun](https://discuss.elastic.co/u/haoyun)\
**Post date:** [December 24, 2018, 3:00am UTC](https://discuss.elastic.co/t/logstash-undefined-method-sanitized/160079/7 "2018-12-24T03:00:02Z")

</div>

目前检查了一下日志输出，发现了大量垃圾数据，而且一条长达5MB，怀疑是日志太长阻塞的（初始运行正常，一段时间后宕死），先让开发项目组整改了。先排除这个原因再有问题再看吧。

---

<div class="post-metadata">

**Author:** ![haoyun](https://avatars.discourse-cdn.com/v4/letter/h/45deac/32.png) [@haoyun](https://discuss.elastic.co/u/haoyun)\
**Post date:** [December 24, 2018, 3:01am UTC](https://discuss.elastic.co/t/logstash-undefined-method-sanitized/160079/8 "2018-12-24T03:01:22Z")

</div>

基本上所有的agent都配置了超级用户，其他节点没发现类似问题。

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 21, 2019, 3:01am UTC](https://discuss.elastic.co/t/logstash-undefined-method-sanitized/160079/9 "2019-01-21T03:01:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
