SlowLogs entries in both SlowLogs and Default Logs

Elastic Stack Elasticsearch
1

Hi,

I am facing issue that my default log is full of slowlog entries. All though I have slowlogs for search and indexing getting generated separately. I have enabled slowlog in log4j.properties. I have daily indexes so I have given thresholds in index template.

Can someone check if we are making any mistake in our settings.

Log4j.properties settings for old style indexing slowlog (similarly we have for search and json as well)
######## Indexing slowlog - old style pattern ##
appender.index_indexing_slowlog_rolling_old.type = RollingFile
appender.index_indexing_slowlog_rolling_old.name = index_indexing_slowlog_rolling_old
appender.index_indexing_slowlog_rolling_old.fileName = {sys:es.logs.base_path}{sys:file.separator}{sys:es.logs.cluster_name}\ _index_indexing_slowlog.log appender.index_indexing_slowlog_rolling_old.layout.type = PatternLayout appender.index_indexing_slowlog_rolling_old.layout.pattern = [%d{ISO8601}][%-5p][%-25c{1.}] [%node_name]%marker %m%n appender.index_indexing_slowlog_rolling_old.filePattern = {sys:es.logs.base_path}{sys:file.separator}{sys:es.logs.cluster_name}
_index_indexing_slowlog-%i.log.gz
appender.index_indexing_slowlog_rolling_old.policies.type = Policies
appender.index_indexing_slowlog_rolling_old.policies.size.type = SizeBasedTriggeringPolicy
appender.index_indexing_slowlog_rolling_old.policies.size.size = 1GB
appender.index_indexing_slowlog_rolling_old.strategy.type = DefaultRolloverStrategy
appender.index_indexing_slowlog_rolling_old.strategy.max = 4
logger.index_indexing_slowlog.name = index.indexing.slowlog.index
logger.index_indexing_slowlog.level = trace
logger.index_indexing_slowlog.appenderRef.index_indexing_slowlog_rolling.ref = index_indexing_slowlog_rolling
logger.index_indexing_slowlog.appenderRef.index_indexing_slowlog_rolling_old.ref = index_indexing_slowlog_rolling_old
logger.index_indexing_slowlog.additivity = true

Index template entry for Indexing SlowLog (similarly we have for search as well)

    "indexing" : {
      "slowlog" : {
        "threshold" : {
          "index" : {
            "warn" : "500ms",
            "info" : "100ms"
          }
        }
      }
    },

Thanks,
Ankit.

2

Please help.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.