Machine Learning create new single metric job is done but result not coming

** Using ELK And Xpack 5.4.1 . Apache accesslog indexed successfully.**

When creating new single metric job :
Aggregation : SUM
Field : Offset
Bucket span : 5
Running |> Graph loaded .
creating job : Entered Name and description -> Clicking Create job

Then
Below show in log comes in elastic search Log 1

-----------------------------------------------------------------------------

Analyzing status showing kibana . Clicking view results . No response. Not any change in graph . Old graph is showing . Machine learning not showing any analysis

Then
Elastic search log at the time of clicking View results in Kibana Log 2

---------------------------------------------------------------------------------------

LOG1 And LOG2 Shown in Reply

PFA for Kibana output after view result

_

LOG1

[2017-11-29T15:41:54,760][DEBUG][o.e.a.s.TransportSearchAction] [UST-ES-Node-Rijin-1] [logstash-2014.10.10][4], node[sv_LN5o4TQKL81l5NaSI3g], [P], s[STARTED], a[id=j38UiYUVRBelH5iTNtTBVA]: Failed to execute [SearchRequest{searchType=QUERY_THEN_FETCH, indices=[logstash-], indicesOptions=IndicesOptions[id=38, ignore_unavailable=false, allow_no_indices=true, expand_wildcards_open=true, expand_wildcards_closed=false, allow_alisases_to_multiple_indices=true, forbid_closed_indices=true], types=[], routing='null', preference='null', requestCache=null, scroll=null, source={
"size" : 0,
"query" : {
"bool" : {
"filter" : [
{
"query_string" : {
"query" : "
",
"fields" : [ ],
"use_dis_max" : true,
"tie_breaker" : 0.0,
"default_operator" : "or",
"auto_generate_phrase_queries" : false,
"max_determinized_states" : 10000,
"enable_position_increments" : true,
"fuzziness" : "AUTO",
"fuzzy_prefix_length" : 0,
"fuzzy_max_expansions" : 50,
"phrase_slop" : 0,
"analyze_wildcard" : true,
"escape" : false,
"split_on_whitespace" : true,
"boost" : 1.0
}
},
{
"range" : {
"@timestamp" : {
"from" : 1396290600000,
"to" : 1398882599999,
"include_lower" : true,
"include_upper" : true,
"format" : "epoch_millis",
"boost" : 1.0
}
}
}
],
"disable_coord" : false,
"adjust_pure_negative" : true,
"boost" : 1.0
}
},
"aggregations" : {
"times" : {
"date_histogram" : {
"field" : "@timestamp",
"interval" : "3600000ms",
"offset" : 0,
"order" : {
"_key" : "asc"
},
"keyed" : false,
"min_doc_count" : 1
},
"aggregations" : {
"field_value" : {
"sum" : {
"field" : "offset"
}
}
}
}
}
}}] lastShard [true]
org.elasticsearch.transport.RemoteTransportException: [UST-ES-Node-Rijin-1][127.0.0.1:9300][indices:data/read/search[phase/query]]
Caused by: org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execution of org.elasticsearch.transport.TransportService$7@52640098 on EsThreadPoolExecutor[search, queue capacity = 1000, org.elasticsearch.common.util.concurrent.EsThreadPoolExecutor@2b925cf1[Running, pool size = 2, active threads = 2, queued tasks = 1000, completed tasks = 114159]]

LOG2

at org.elasticsearch.common.util.concurrent.EsAbortPolicy.rejectedExecution(EsAbortPolicy.java:50)
at java.util.concurrent.ThreadPoolExecutor.reject(ThreadPoolExecutor.java:823)
at java.util.concurrent.ThreadPoolExecutor.execute(ThreadPoolExecutor.java:1369)
at org.elasticsearch.common.util.concurrent.EsThreadPoolExecutor.doExecute(EsThreadPoolExecutor.java:94)
at org.elasticsearch.common.util.concurrent.EsThreadPoolExecutor.execute(EsThreadPoolExecutor.java:89)
at org.elasticsearch.transport.TransportService.sendLocalRequest(TransportService.java:623)
at org.elasticsearch.transport.TransportService.access$000(TransportService.java:73)
at org.elasticsearch.transport.TransportService$3.sendRequest(TransportService.java:133)
at org.elasticsearch.transport.TransportService.sendRequestInternal(TransportService.java:569)
at org.elasticsearch.transport.TransportService.sendRequest(TransportService.java:502)
at org.elasticsearch.transport.TransportService.sendChildRequest(TransportService.java:529)
at org.elasticsearch.transport.TransportService.sendChildRequest(TransportService.java:520)
at org.elasticsearch.action.search.SearchTransportService.sendExecuteQuery(SearchTransportService.java:146)
at org.elasticsearch.action.search.SearchQueryThenFetchAsyncAction.executePhaseOnShard(SearchQueryThenFetchAsyncAction.java:74)
at org.elasticsearch.action.search.InitialSearchPhase.performPhaseOnShard(InitialSearchPhase.java:146)
at org.elasticsearch.action.search.InitialSearchPhase.run(InitialSearchPhase.java:131)
at org.elasticsearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:144)
at org.elasticsearch.action.search.AbstractSearchAsyncAction.start(AbstractSearchAsyncAction.java:114)
at org.elasticsearch.action.search.TransportSearchAction.executeSearch(TransportSearchAction.java:277)
at org.elasticsearch.action.search.TransportSearchAction.doExecute(TransportSearchAction.java:199)
at org.elasticsearch.action.search.TransportSearchAction.doExecute(TransportSearchAction.java:60)
at org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:170)
at org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:142)
at org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:84)
at org.elasticsearch.client.node.NodeClient.executeLocally(NodeClient.java:83)
at org.elasticsearch.client.node.NodeClient.doExecute(NodeClient.java:72)
at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:408)
at org.elasticsearch.client.FilterClient.doExecute(FilterClient.java:67)
at org.elasticsearch.xpack.security.InternalClient.doExecute(InternalClient.java:84)
at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:408)
at org.elasticsearch.action.ActionRequestBuilder.execute(ActionRequestBuilder.java:80)
at org.elasticsearch.action.ActionRequestBuilder.execute(ActionRequestBuilder.java:54)
at org.elasticsearch.action.ActionRequestBuilder.get(ActionRequestBuilder.java:62)
at org.elasticsearch.xpack.ml.datafeed.extractor.chunked.ChunkedDataExtractor.executeSearchRequest(ChunkedDataExtractor.java:144)
at org.elasticsearch.xpack.ml.datafeed.extractor.chunked.ChunkedDataExtractor.requestDataSummary(ChunkedDataExtractor.java:126)
at org.elasticsearch.xpack.ml.datafeed.extractor.chunked.ChunkedDataExtractor.setUpChunkedSearch(ChunkedDataExtractor.java:104)
at org.elasticsearch.xpack.ml.datafeed.extractor.chunked.ChunkedDataExtractor.next(ChunkedDataExtractor.java:97)
at org.elasticsearch.xpack.ml.datafeed.DatafeedJob.run(DatafeedJob.java:165)
at org.elasticsearch.xpack.ml.datafeed.DatafeedJob.runLookBack(DatafeedJob.java:100)
at org.elasticsearch.xpack.ml.datafeed.DatafeedManager$Holder.executeLoopBack(DatafeedManager.java:366)
at org.elasticsearch.xpack.ml.datafeed.DatafeedManager$Holder.access$200(DatafeedManager.java:303)
at org.elasticsearch.xpack.ml.datafeed.DatafeedManager$2.doRun(DatafeedManager.java:158)
at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingRunnable.run(ThreadContext.java:569)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
]]
[2017-11-29T15:43:14,507][INFO ][o.e.x.m.d.DatafeedManager] [no_realtime] attempt to stop datafeed [datafeed-12q] for job [12q]
[2017-11-29T15:43:14,507][INFO ][o.e.x.m.d.DatafeedManager] [no_realtime] try lock [20s] to stop datafeed [datafeed-12q] for job [12q]...
[2017-11-29T15:43:14,507][INFO ][o.e.x.m.d.DatafeedManager] [no_realtime] stopping datafeed [datafeed-12q] for job [12q], acquired [true]...
[2017-11-29T15:43:14,508][INFO ][o.e.x.m.d.DatafeedManager] [no_realtime] datafeed [datafeed-12q] for job [12q] has been stopped
[2017-11-29T15:43:14,704][INFO ][o.e.x.m.j.p.a.AutodetectProcessManager] [UST-ES-Node-Rijin-1] Closing job [12q], because [close job (api)]
[2017-11-29T15:43:15,717][INFO ][o.e.x.m.j.p.l.CppLogMessageHandler] [12q] [autodetect/13982] [CCmdSkeleton.cc@75] Handled 0 records
[2017-11-29T15:43:15,718][INFO ][o.e.x.m.j.p.l.CppLogMessageHandler] [12q] [autodetect/13982] [CAnomalyDetector.cc@1704] Pruning all models
[2017-11-29T15:43:15,735][INFO ][o.e.x.m.j.p.a.o.StateProcessor] [UST-ES-Node-Rijin-1] [12q] State output finished
[2017-11-29T15:43:15,849][INFO ][o.e.x.m.j.p.a.o.AutoDetectResultProcessor] [12q] 0 buckets parsed from autodetect output
[2017-11-29T15:43:16,078][INFO ][o.e.x.m.j.p.a.AutodetectCommunicator] [12q] job closed

Is it index ceartion blocked by ES. Or index and srads cof needed any change ?

Hi Friends ,

This issue is solved with newer version . Installed ELK and Xpack 5.6.4 . Everithing is working well . Machine learning is analyzing log patterns and producing proper output .

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.