Logstash - UNEXPECTED POOL ERROR

przemolb · February 26, 2018, 4:32pm

[2018-02-26T16:28:52,669][WARN ][logstash.outputs.elasticsearch] UNEXPECTED POOL ERROR {:e=>#<LogStash::Outputs::ElasticSearch::HttpClient::Pool::NoConnectionAvailableError: No Available connections>}
[2018-02-26T16:28:52,669][ERROR][logstash.outputs.elasticsearch] Attempted to send a bulk request to elasticsearch, but no there are no living connections in the connection pool. Perhaps Elasticsearch is unreachable or down? {:error_message=>"No Available connections", :class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::NoConnectionAvailableError", :will_retry_in_seconds=>8}

But I can get to elasticsearch port:

telnet our-elk-server 9200
Trying 10.240.1.4...
Connected to our-elk-server.
Escape character is '^]'.
^]
telnet> Connection closed.

przemolb · February 26, 2018, 5:33pm

All the configuration files are here:

gist.github.com

https://gist.github.com/anonymous/f6f08cfd590fc12b58af31ca725c0ee7

elasticsearch

# name of the cluster - all nodes in the cluster must have same cluster name
cluster.name: 'qa-elk'

# use the private IP of the node here
network.host: "0"

path:
    data: /var/lib/elasticsearch
    logs: /var/log/elasticsearch

This file has been truncated. show original

filebeat.yml

filebeat.prospectors:
- input_type: log
  paths:
    - /var/log/*
  fields:
    type: system
  exclude_files: ['\.gz$', 'btmp*', 'wtmp*']
  close_inactive: 1h

- input_type: log

This file has been truncated. show original

kibana

elasticsearch.url: http://our-elk.server:9200
server.host: 0.0.0.0
logging.dest: /var/log/kibana.log
logging.silent: false
elasticsearch.username: "username"
elasticsearch.password: "password"
elasticsearch.ssl.verificationMode: none
searchguard.basicauth.enabled: true

There are more than three files. show original

system · March 26, 2018, 5:33pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.