33 lines
1.4 KiB
Markdown
33 lines
1.4 KiB
Markdown
#ELK
|
|
|
|
- filebeat 재시작후 Logstash 로그
|
|
> ... message=>"No Available connections" ...
|
|
> [2024-06-21T05:50:13,531][ERROR][logstash.outputs.elasticsearch][main][3394228cfe781c7f5045d8b255bb26c9e991ecaafd2f2ab6a3b19b0b8be87572] Attempted to send a bulk request but there are no living connections in the pool (perhaps Elasticsearch is unreachable or down?) {:message=>"No Available connections", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::NoConnectionAvailableError, :will_retry_in_seconds=>16}
|
|
|
|
```yml
|
|
# doker-compose env에 아래 설정 추가
|
|
|
|
##elasticsearch에 hostname 추가
|
|
hostname: es01
|
|
|
|
## logstash.conf output에 설정 변경
|
|
### 변경 hosts => "http://10.200.31.130:9200"
|
|
hosts => "http://es01:9200"
|
|
ssl => false ## 추가
|
|
|
|
|
|
```
|
|
|
|
- "Caused by: org.elasticsearch.action.search.SearchPhaseExecutionException: Search rejected due to missing shards
|
|
|
|
|
|
|
|
---
|
|
|
|
```txt
|
|
|
|
"level": "ERROR", "component": "o.e.x.d.l.DeprecationIndexingComponent", "cluster.name": "docker-cluster", "node.name": "es01-node", "message": "Bulk write of deprecation logs encountered some failures: [[eVR2TpABDRy1v2BxD6Kv UnavailableShardsException[[.ds-.logs-deprecation.elasticsearch-default-2024.06.19-000005][0] primary shard is not active Timeout: [1m], request: [BulkShardRequest [[.ds-.logs-deprecation.elasticsearch-default-2024.06.19-000005][0]] containing
|
|
|
|
```
|
|
|