ELK集群故障处理

4532423

1.Logstash向Elasticsearch插入数据报错
报错信息如下：

{:timestamp=>"2016-07-06T00:02:22.289000+0800", :message=>"retrying failed action with response code: 429 ({\"type\"=>\"es_rejected_execution_exception\", \"reason\"=>\"rejected execution of org.elasticsearch.transport.TransportService$4@74bf8f58 on EsThreadPoolExecutor[bulk, queue capacity = 50, org.elasticsearch.common.util.concurrent.EsThreadPoolExecutor@48d6d348[Running, pool size = 32, active threads = 32, queued tasks = 50, completed tasks = 787682]]\"})", :level=>:info}

1 2 3 4 5 6 7 8 9 10

output {    elasticsearch {         hosts   => ["xxxxx"]         workers => 30         flush_size => 50000         idle_flush_time => 5         index => "logstash-%{type}-%{+YYYY.MM.dd}"                            }        }

Logstash的elasticsearch output插件的












参考资料：
https://www.elastic.co/guide/en/ ... -elasticsearch.html

Ethan

DDDDDDDDDDDDDDDDD