You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Config File (if you have sensitive info, please remove it):
Sample Data:
Steps to Reproduce:
while using filebeat and multiline input I am experiencing issues after logstash updates the mapping for index and after it all the events are not processed due to indefinite retry.
2021-07-06T05:31:15,302][ERROR][logstash.outputs.elasticsearch][log_monitoring][7338da4e6115dea6be7dbf86d42de2614d74a3a42465274043c908858710a98c] Encountered a retryable error. Will Retry with expone
ntial backoff {:code=>400, :url=>"http://10.90.10.92:9200/_bulk"}
[2021-07-06T05:31:17,471][ERROR][logstash.outputs.elasticsearch][log_monitoring][7338da4e6115dea6be7dbf86d42de2614d74a3a42465274043c908858710a98c] Encountered a retryable error. Will Retry with expone
ntial backoff {:code=>400, :url=>"http://10.90.10.92:9200/_bulk"}
[2021-07-06T05:31:21,480][ERROR][logstash.outputs.elasticsearch][log_monitoring][7338da4e6115dea6be7dbf86d42de2614d74a3a42465274043c908858710a98c] Encountered a retryable error. Will Retry with expone
ntial backoff {:code=>400, :url=>"http://10.90.10.92:9200/_bulk"}
[2021-07-06T05:31:29,514][ERROR][logstash.outputs.elasticsearch][log_monitoring][7338da4e6115dea6be7dbf86d42de2614d74a3a42465274043c908858710a98c] Encountered a retryable error. Will Retry with expone
ntial backoff {:code=>400, :url=>"http://10.90.10.92:9200/_bulk"}
[2021-07-06T05:31:45,522][ERROR][logstash.outputs.elasticsearch][log_monitoring][7338da4e6115dea6be7dbf86d42de2614d74a3a42465274043c908858710a98c] Encountered a retryable error. Will Retry with expone
ntial backoff {:code=>400, :url=>"http://10.90.10.92:9200/_bulk"}
LS is retry-ing 400s since if the ES issue got fixed on the cluster than data would eventually get ingested...
we lack information on the ES part here around the _bulk errors thus there isn't a specific advice to give you.
while using filebeat and multiline input I am experiencing issues after logstash updates the mapping for index and after it all the events are not processed due to indefinite retry.
logstash conf
Logstash logs
Elasticsearch logs
Mapping change
addition of flags inside logs section of mapping with following data
The text was updated successfully, but these errors were encountered: