Comments (3)
Steps to reproduce:
- Ensure ES is installed > 5.5.x
- Create a simple index - ensure the doc has
@timestamp
field
PUT test/test/1
{
"message":"test",
"@timestamp":"2017-09-10T23:00:00.000Z"
}
- Configure LS as follows
input {
stdin {
}
}
filter {
elasticsearch {
hosts => ["localhost:9200"]
query => "test"
index => "test"
fields => [ ["message", "match"] ]
user => "elastic"
password => "changeme"
}
}
output {
stdout { codec => dots }
}
- Ensure workers in LS is > 1 (default if more than 1 core)
- Pipe any large file though LS i.e.
cat /tmp/nice_big_file | ./logstash -f ../conf/es_filter_issue/logstash.conf
from logstash-filter-elasticsearch.
We have discussed this morning and like I've said it appear to be a thread safety issues in the elasticsearch-ruby client that is show under heavy load.
We have two plan for this plugin:
Long term
We are planning to rewrite the plugin using the same client library that we have developed for the elasticsearch output or use the java native client.
Short term
Meanwhile we will implement a fix to work around the thread safety issue, we will create a new connection object for every worker thread. This will waste a bit of resource but it will make sure that every thread have their own view of the world.
from logstash-filter-elasticsearch.
@gingerwizard I have created #77, and it appears to fix the issue you were having. With your use case I can reproduce the error when I apply the PR the error is gone.
I have created #78 as a long term goal.
from logstash-filter-elasticsearch.
Related Issues (20)
- Ability to use search templates
- Default setting for "hosts" not working HOT 1
- Fix 8.0 testing due to dropping of document types
- Illegal character in authority at index 8 HOT 10
- [Doc]Remove old compatibility note
- Specifying multiple indices HOT 2
- Fail to parse query_template HOT 1
- [Doc] Update links to new cloud content in Logstash Reference
- [Doc] Configuration option descriptions are inconsistent and lack helpful info
- does not work properly with updated ES client HOT 1
- Add support for configurable timeouts HOT 1
- regression on Manticore 0.8.0 due port being part of host HOT 3
- setting custom user-agent header has no effect HOT 3
- _id
- Add the ability to retry on failure.
- Add a "ssl_certificate_verification" field to Logstash's Elasticsearch Filter
- Change declaration of hosts option to add functionality
- Give a default value to query
- Need cleaning up resources for es-ruby client when pipeline restart
- Select only specific fields from elasticsearch
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from logstash-filter-elasticsearch.