#ELK 

- filebeat 재시작후 Logstash 로그
> ... message=>"No Available connections" ...
> [2024-06-21T05:50:13,531][ERROR][logstash.outputs.elasticsearch][main][3394228cfe781c7f5045d8b255bb26c9e991ecaafd2f2ab6a3b19b0b8be87572] Attempted to send a bulk request but there are no living connections in the pool (perhaps Elasticsearch is unreachable or down?) {:message=>"No Available connections", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::NoConnectionAvailableError, :will_retry_in_seconds=>16}

```yml
#  doker-compose env에 아래 설정 추가

##elasticsearch에 hostname 추가
hostname: es01

## logstash.conf  output에 설정 변경
### 변경 hosts => "http://10.200.31.130:9200" 
hosts => "http://es01:9200"
ssl => false ## 추가

 
```

- "Caused by: org.elasticsearch.action.search.SearchPhaseExecutionException: Search rejected due to missing shards 



---

```txt

 "level": "ERROR", "component": "o.e.x.d.l.DeprecationIndexingComponent", "cluster.name": "docker-cluster", "node.name": "es01-node", "message": "Bulk write of deprecation logs encountered some failures: [[eVR2TpABDRy1v2BxD6Kv UnavailableShardsException[[.ds-.logs-deprecation.elasticsearch-default-2024.06.19-000005][0] primary shard is not active Timeout: [1m], request: [BulkShardRequest [[.ds-.logs-deprecation.elasticsearch-default-2024.06.19-000005][0]] containing

```