# Stalled pipeline help

**URL:** <https://discuss.elastic.co/t/stalled-pipeline-help/137949>\
**Category:** Logstash\
**Created:** [June 29, 2018, 11:25am UTC](https://discuss.elastic.co/t/stalled-pipeline-help/137949 "2018-06-29T11:25:04Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![makibroshett](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/makibroshett/32/106322_2.png) [@makibroshett](https://discuss.elastic.co/u/makibroshett)\
**Post date:** [June 29, 2018, 11:25am UTC](https://discuss.elastic.co/t/stalled-pipeline-help/137949/1 "2018-06-29T11:25:04Z")

</div>

Hi,  
I have a logstash 6.1.1 running in a docker container, and am trying to understand why one our pipeline is not sending data. I stopped the instance and noticed that in the log it mentionned the pipeline was stalled:

> [2018-06-29T09:33:04,371][WARN][logstash.runner] SIGTERM received. Shutting down the agent.  
> [2018-06-29T09:33:04,475][INFO][logstash.pipeline] Pipeline terminated {"pipeline.id"=\>"rtsp"}  
> [2018-06-29T09:33:09,486][WARN][logstash.shutdownwatcher] {"inflight\_count"=\>0, "stalling\_thread\_info"=\>{"other"=\>[{"thread\_id"=\>38, "name"=\>"[rtsp]\<file", "current\_call"=\>"[...]/logstash-core/lib/logstash/util/wrapped\_acked\_queue.rb:54:in `write'"}, {"thread_id"=>39, "name"=>"[rtsp]<file", "current_call"=>"[...]/logstash-core/lib/logstash/util/wrapped_acked_queue.rb:54:in `write'"}]}}  
> [2018-06-29T09:33:09,490][ERROR][logstash.shutdownwatcher] The shutdown process appears to be stalled due to busy or blocked plugins. Check the logs for more information.

My questions:

- what logs is the message referring to, because I checked logstash-plain.log (and found that message) but nothing more ?
- Is the wrapped\_acked\_queue responsible for writing the checkpointing/persistence files/queues ? If so is it an indication that the worker is busy writing many events to the persistence queues ?

Thanks for your help and time

Olivier

---

<div class="post-metadata">

**Author:** ![makibroshett](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/makibroshett/32/106322_2.png) [@makibroshett](https://discuss.elastic.co/u/makibroshett)\
**Post date:** [June 29, 2018, 2:32pm UTC](https://discuss.elastic.co/t/stalled-pipeline-help/137949/2 "2018-06-29T14:32:04Z")

</div>

Ok so I finally realized the logs I did not checked were the docker logs, that's one question less.  
For lack of a smarter thing to do, I stopped (as gracefuly as possible) and restarted logstash with only that pipeline enabled. I pasted the log below, snipped for clarity.

To me, it looks like the pipeline is initalizing and reading the persistent queue but somehow it fails to do so because of bad XML... Still the pipeline is apparently running, but nothing comes out of it (it also otuputs to STDOUT) despite input files being added regularly... It looks like the input plugin is blocked writing pending events to the queue...

That's as much as I can understand for now, any idea how to proceed from there?

Thanks for your help!

> 2018-06-29T13:19:49,330][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"fb\_apache", :directory=\>"/usr/share/logstash/modules/fb\_apache/configuration"}  
> [2018-06-29T13:19:49,333][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"netflow", :directory=\>"/usr/share/logstash/modules/netflow/configuration"}  
> [2018-06-29T13:19:49,851][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"arcsight", :directory=\>"/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/x-pack-6.1.1-java/modules/arcsight/configuration"}  
> [2018-06-29T13:19:50,303][INFO][logstash.runner] Starting Logstash {"logstash.version"=\>"6.1.1"}  
> [2018-06-29T13:19:50,371][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600}  
> [2018-06-29T13:21:05,128][WARN][org.logstash.ackedqueue.Queue] recovered head data page 15 is different than checkpoint, using recovered page information  
> [2018-06-29T13:21:18,152][INFO][logstash.outputs.elasticsearch] Elasticsearch pool URLs updated {:changes=\>{:removed=\>, :added=\>[[http://elastic:xxxxxx@spade:9306/](http://elastic:xxxxxx@spade:9306/)]}}  
> [2018-06-29T13:21:18,155][INFO][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck\_url=\>[http://elastic:xxxxxx@spade:9306/](http://elastic:xxxxxx@spade:9306/), :path=\>"/"}  
> [2018-06-29T13:21:18,329][WARN][logstash.outputs.elasticsearch] Restored connection to ES instance {:url=\>"[http://elastic:xxxxxx@spade:9306/](http://elastic:xxxxxx@spade:9306/)"}  
> [2018-06-29T13:21:18,394][INFO][logstash.outputs.elasticsearch] ES Output version determined {:es\_version=\>nil}  
> [2018-06-29T13:21:18,395][WARN][logstash.outputs.elasticsearch] Detected a 6.x and above cluster: the `type` event field won't be used to determine the document \_type {:es\_version=\>6}  
> [2018-06-29T13:21:18,405][INFO][logstash.outputs.elasticsearch] Using mapping template from {:path=\>"/data\_bkp/logstash/01\_CPDLC/templates/rtsp\_template.json"}  
> [2018-06-29T13:21:18,431][INFO][logstash.outputs.elasticsearch] Attempting to install template  
> ...snip...  
> [2018-06-29T13:21:18,458][INFO][logstash.outputs.elasticsearch] Installing elasticsearch template to \_template/rtsp\_template  
> [2018-06-29T13:21:18,698][INFO][logstash.outputs.elasticsearch] New Elasticsearch output {:class=\>"LogStash::Outputs::Elasticsearch", :hosts=\>["//spade:9306"]}  
> [2018-06-29T13:21:19,119][INFO][logstash.pipeline] Starting pipeline {:pipeline\_id=\>"rtsp", "pipeline.workers"=\>1, "pipeline.batch.size"=\>125, "pipeline.batch.delay"=\>5, "pipeline.max\_inflight"=\>125, :thread=\>"#\<Thread:0x4bbee808@/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:245 run\>"}  
> Exception in thread "Ruby-0-Thread-9@[rtsp]\>worker0: /usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:392" org.logstash.ackedqueue.QueueRuntimeException: deserialize invocation error  
> at org.logstash.ackedqueue.Queue.deserialize(Queue.java:701)  
> at org.logstash.ackedqueue.Batch.deserializeElements(Batch.java:62)  
> at org.logstash.ackedqueue.Batch.(Batch.java:26)  
> at org.logstash.ackedqueue.Queue.\_readPageBatch(Queue.java:574)  
> at org.logstash.ackedqueue.Queue.readBatch(Queue.java:558)  
> ...snip...  
> at org.logstash.ackedqueue.Queue.deserialize(Queue.java:699)  
> ... 50 more  
> Caused by: com.fasterxml.jackson.databind.exc.MismatchedInputException: Unexpected token (START\_OBJECT), expected START\_ARRAY: need JSON Array to contain As.WRAPPER\_ARRAY type information for class java.util.HashMap  
> at [Source: (byte)"�dMETA�dpathxR/data\_nfs/rtsp/LOGS/OPS\_GVA/2018/06/28/Cockpit\_unzipped/res\_LSAG\_20180628\_013.csvdhosthgsrecs01�dDATA�h@versiona1dhosthgsrecs01dpathxR/data\_nfs/rtsp/LOGS/OPS\_GVA/2018/06/28/Cockpit\_unzipped/res\_LSAG\_20180628\_013.csvcACCdLSAGj@timestampx2018-06-28T09:57:29.848Zgmessagex�28.06.2018;09:36:50;EZS78EL;0x4B1A34;28.06.2018;09:36:48;ATN\_AIR;CPDLC message;99;;0;;1;DM99 CURRENT DATA AUTHORITY;EGKK;LSGG;46.6846275;5.0775558333333;23875;103.23303;1;1;1;0;1;0;-914.0625;0.3515625;INN;��"; line: -1, column: 0]  
> ... 55 more  
> [2018-06-29T13:21:19,680][INFO][logstash.pipeline] Pipeline started {"pipeline.id"=\>"rtsp"}  
> [2018-06-29T13:21:19,693][INFO][logstash.agent] Pipelines running {:count=\>1, :pipelines=\>["rtsp"]}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 27, 2018, 2:32pm UTC](https://discuss.elastic.co/t/stalled-pipeline-help/137949/3 "2018-07-27T14:32:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
