I have alerts configured on my Logstash - Elasticsearch setup which perform
regular queries to see what state the cluster is in etc.
Recently I had a situation where Logstash was running OK and ES cluster was
in Green state, but there was no data going into ES.
Is there a way to monitor this, e.g if the incoming data rate to ES drops
below 100 events a minute.
I can't do it by Logstash metrics because that side of it was running
normally, i.e. no change in data rates.
I have alerts configured on my Logstash - Elasticsearch setup which
perform regular queries to see what state the cluster is in etc.
Recently I had a situation where Logstash was running OK and ES cluster
was in Green state, but there was no data going into ES.
Is there a way to monitor this, e.g if the incoming data rate to ES drops
below 100 events a minute.
I can't do it by Logstash metrics because that side of it was running
normally, i.e. no change in data rates.
I have alerts configured on my Logstash - Elasticsearch setup which
perform regular queries to see what state the cluster is in etc.
Recently I had a situation where Logstash was running OK and ES
cluster was in Green state, but there was no data going into ES.
Is there a way to monitor this, e.g if the incoming data rate to ES
drops below 100 events a minute.
I can't do it by Logstash metrics because that side of it was running
normally, i.e. no change in data rates.
How can Logstash be running normally when it halts the pipeline when one
output isn't able to accept messages? Are you saying that Elasticsearch
accepts messages but just drops them on the floor?
--
Magnus Bäck | Software Engineer, Development Tools magnus.back@sonymobile.com | Sony Mobile Communications
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.