The error reported is: - logstash error


(tushar) #1

i am facing this issue for logstash 1.5.4

this is my configuration

output {
rabbitmq {
key => "ambari-key"
exchange => "ambari-exchange-type"
exchange_type => "direct"
user => "rabbit"
password => "1234"
host => "my.host.name"
port => 5672
durable => true
persistent => true
vhost => "/"
}
}

i error logs, only i can see is ....... {:timestamp=>"2015-10-25T14:07:45.451000+0000", :message=>"The error reported is: \n "}

Note - RabbitMQ is configured with the LDAP


(Mark Walkom) #2

What's your complete config look like?
Also make sure you format it when you post, it makes it easier to read.


(tushar) #3
input {
file {
    path => "/var/log/ambari-server/ambari-alerts.log"
    type => "ambari-log"
  }
}
filter {
  grok {
    match => { "message" => "%{DATE_EU:date} %{TIME:time} %{GREEDYDATA:ambari_message}" }
  }
if [ambari_message] == " [UNKNOWN] " {
    drop { }
  }
if [ambari_message] == " [OK] " {
    drop { }
  }
}
output {
    rabbitmq {
      key => "ambari-key"
      exchange => "ambari-exchange-type"
      exchange_type => "direct"
      user => "admin"
      password => "Is3+3=0??"
      host => "integration.dev.ida"
      port => 5672
      durable => true
      persistent => true
      vhost => "logging"
    }
}

i have removed rabbitmq from LDAP but still the same issue :frowning:


(tushar) #4

Issue is resolved . . thanks for the comments ..

we had a same user (admin) in our FreeIPA (LDAP) and for rabbitmq also . .

and one more IMP thing is i changed vhost => "logging" to vhost => "/" . . now its working :smile:


(system) #5