Open issues

1.4.2 crash for unknown reason
LOGSTASH-2285
S3 configuration doesn't work when loaded via folder
LOGSTASH-2280
RabbitMQ input should support multi ack
LOGSTASH-2277
multiline codec: logstash getting blocked
LOGSTASH-2274
contrib zabbix plugin - zabbix_sender [805]: Warning: incorrect answer from server []
LOGSTASH-2271
redis input reconnect
LOGSTASH-2270
How to troubleshoot Exception: java.lang.ThreadDeath
LOGSTASH-2268
filter chaining question
LOGSTASH-2263
Guidance on lookup
LOGSTASH-2262
plugin install contrib fails
LOGSTASH-2257
contrib plugin: cipher filter, base64 encoding bug on encryption, support for random IVs
LOGSTASH-2256
Mixed up Init and upstart configs and process.
LOGSTASH-2253
[ES_master] observer: timeout notification from cluster service. timeout setting [1m], time since start [1m]
LOGSTASH-2250
Contrib distribution overwrites some files in Logstash
LOGSTASH-2249
Logstash contrib plugin manual installation steps are not correct
LOGSTASH-2248
Logstash crashs and Google BigQuery feature upgrade
LOGSTASH-2247
Input imap - undefined method encode for nil:NilClass
LOGSTASH-2245
Unable to stop Logstash with a unix input
LOGSTASH-2239
Logstash may emit duplicates when restarted
LOGSTASH-2237
Unix Input Plugin cannot connect to UNIX Socket
LOGSTASH-2233
Mutate type as boolean.
LOGSTASH-2232
Logstash 1.4.x init script "deficiencies"
LOGSTASH-2225
Challenges in SMAPI logs Parsing
LOGSTASH-2224
Gentoo: auto_gem
LOGSTASH-2221
rpm sysv type
LOGSTASH-2218
KV modification to allow for Key to be forced into uppercase
LOGSTASH-2217
Feature: Add HOSTNAME to environment for ENV filter
LOGSTASH-2216
Adding output plugin for ganglia events on the ganglia webapp
LOGSTASH-2215
logstash multiline: Adding lastline to previous line.
LOGSTASH-2214
How to get time %{+YYYY-MM-dd HH:mm:ss} in my timezone
LOGSTASH-2211
How to get the time of format YYYY-MM-dd_HH from @timestamp in output file block
LOGSTASH-2210
Logstash-Forwarder nohup: appending output to `nohup.out'
LOGSTASH-2208
Multiline filter creates array of messages instead single event with single line
LOGSTASH-2202
Enable S3 Input plugin to use EC2 instance IAM roles
LOGSTASH-2195
New plugin : aggregate filter
LOGSTASH-2194
Improve GC logging
LOGSTASH-2192
Logstash Agent Does Not Seem to Talk to Redis
LOGSTASH-2191
logstash 1.4.0/1.4.1 with USE_JRUBY=1 and elasticsearch_http output unable to work
LOGSTASH-2190
Mongodb output plugin causes elasticsearch output plugin to fail
LOGSTASH-2187
Debian packages fail to install
LOGSTASH-2185
XMPP input error
LOGSTASH-2184
Exception in thread ">output" java.lang.NullPointerException when stdin is closed
LOGSTASH-2180
RFE: Allow KV Filter value_split to be a regex or contain multiple grouped characters
LOGSTASH-2179
RabbitMQ Input - Does not support consumer cancellations properly
LOGSTASH-2178
RabbitMQ output - Support host array
LOGSTASH-2177

1.4.2 crash for unknown reason

Only thing I noticed while watching process is CPU column of ps output slowly decreases down towards 0 and eventually process dies.

[root@rndlogstash1 logstash]# ls -lstr; ps auxx |grep logstash
total 1496
8 rw-rr-. 1 logstash logstash 4740 Aug 23 03:21 logstash.log-20140823.gz
0 rw-rw-rw. 1 root root 0 Aug 26 15:42 logstash.err
4 rw-rw-rw. 1 root root 57 Aug 26 15:42 logstash.stdout
1484 rw-rr-. 1 logstash logstash 1519567 Aug 26 16:00 logstash.log
logstash 7775 6.8 5.8 3037432 229764 pts/0 SNl 15:42 1:18 /usr/bin/java -Djava.io.tmpdir=/var/lib/logstash -Xmx500m -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -Djava.awt.headless=true -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -jar /opt/logstash/vendor/jar/jruby-complete-1.7.11.jar -I/opt/logstash/lib /opt/logstash/lib/logstash/runner.rb agent -f /etc/logstash/conf.d -l /var/log/logstash/logstash.log --verbose
root 8109 0.0 0.0 103252 828 pts/0 S+ 16:01 0:00 grep logstash

[root@rndlogstash1 fd]# ls -lstr /var/log/logstash; ps auxx |grep logstash
total 1740
8 rw-rr-. 1 logstash logstash 4740 Aug 23 03:21 logstash.log-20140823.gz
0 rw-rw-rw. 1 root root 0 Aug 26 15:42 logstash.err
4 rw-rw-rw. 1 root root 57 Aug 26 15:42 logstash.stdout
1728 rw-rr-. 1 logstash logstash 1768080 Aug 26 16:02 logstash.log
logstash 7775 6.4 5.8 3037432 229768 pts/0 SNl 15:42 1:19 /usr/bin/java -Djava.io.tmpdir=/var/lib/logstash -Xmx500m -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -Djava.awt.headless=true -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -jar /opt/logstash/vendor/jar/jruby-complete-1.7.11.jar -I/opt/logstash/lib /opt/logstash/lib/logstash/runner.rb agent -f /etc/logstash/conf.d -l /var/log/logstash/logstash.log --verbose
root 8120 0.0 0.0 103252 828 pts/0 S+ 16:02 0:00 grep logstash

[root@rndlogstash1 fd]# ls -la | wc -l
142
[root@rndlogstash1 fd]# ls -la
total 0
dr-x------. 2 logstash logstash 0 Aug 26 15:43 .
dr-xr-xr-x. 8 logstash logstash 0 Aug 26 15:42 ..
lr-x------. 1 logstash logstash 64 Aug 26 16:00 0 -> /dev/null
l-wx------. 1 logstash logstash 64 Aug 26 16:00 1 -> /var/log/logstash/logstash.stdout
lr-x------. 1 logstash logstash 64 Aug 26 16:00 10 -> /dev/urandom
lr-x------. 1 logstash logstash 64 Aug 26 16:00 100 -> /opt/logstash/patterns/nagios
lr-x------. 1 logstash logstash 64 Aug 26 16:00 101 -> /opt/logstash/patterns/grok-patterns
lr-x------. 1 logstash logstash 64 Aug 26 16:00 102 -> /opt/logstash/patterns/linux-syslog
lr-x------. 1 logstash logstash 64 Aug 26 16:00 103 -> /opt/logstash/patterns/firewalls
lr-x------. 1 logstash logstash 64 Aug 26 16:00 104 -> /opt/logstash/patterns/junos
lr-x------. 1 logstash logstash 64 Aug 26 16:00 105 -> /opt/logstash/patterns/postgresql
lr-x------. 1 logstash logstash 64 Aug 26 16:00 106 -> /opt/logstash/patterns/mcollective-patterns
lr-x------. 1 logstash logstash 64 Aug 26 16:00 107 -> /opt/logstash/patterns/mcollective
lr-x------. 1 logstash logstash 64 Aug 26 16:00 108 -> /opt/logstash/patterns/java
lr-x------. 1 logstash logstash 64 Aug 26 16:00 109 -> /opt/logstash/patterns/haproxy
lr-x------. 1 logstash logstash 64 Aug 26 16:00 11 -> /opt/logstash/vendor/bundle/jruby/1.9/gems/json-1.8.1-java/lib/json/ext/generator.jar
lr-x------. 1 logstash logstash 64 Aug 26 16:00 110 -> /opt/logstash/patterns/redis
lr-x------. 1 logstash logstash 64 Aug 26 16:00 111 -> /opt/logstash/patterns/ruby
lr-x------. 1 logstash logstash 64 Aug 26 16:00 112 -> /opt/logstash/patterns/mongodb
lr-x------. 1 logstash logstash 64 Aug 26 16:00 113 -> /opt/logstash/patterns/nagios
lr-x------. 1 logstash logstash 64 Aug 26 16:00 114 -> /opt/logstash/patterns/grok-patterns
lr-x------. 1 logstash logstash 64 Aug 26 16:00 115 -> /opt/logstash/patterns/linux-syslog
lr-x------. 1 logstash logstash 64 Aug 26 16:00 116 -> /opt/logstash/patterns/firewalls
lr-x------. 1 logstash logstash 64 Aug 26 16:00 117 -> /opt/logstash/patterns/junos
lr-x------. 1 logstash logstash 64 Aug 26 16:00 118 -> /opt/logstash/patterns/postgresql
lr-x------. 1 logstash logstash 64 Aug 26 16:00 119 -> /opt/logstash/patterns/mcollective-patterns
lrwx------. 1 logstash logstash 64 Aug 26 16:00 12 -> socket:[58096363]
lr-x------. 1 logstash logstash 64 Aug 26 16:00 120 -> /opt/logstash/patterns/mcollective
lr-x------. 1 logstash logstash 64 Aug 26 16:00 121 -> /opt/logstash/patterns/java
lr-x------. 1 logstash logstash 64 Aug 26 16:00 122 -> /opt/logstash/patterns/haproxy
lr-x------. 1 logstash logstash 64 Aug 26 16:00 123 -> /opt/logstash/patterns/redis
lr-x------. 1 logstash logstash 64 Aug 26 16:00 124 -> /opt/logstash/patterns/ruby
lr-x------. 1 logstash logstash 64 Aug 26 16:00 125 -> /opt/logstash/patterns/mongodb
lr-x------. 1 logstash logstash 64 Aug 26 16:00 126 -> /opt/logstash/patterns/nagios
lr-x------. 1 logstash logstash 64 Aug 26 16:00 127 -> /opt/logstash/patterns/grok-patterns
lr-x------. 1 logstash logstash 64 Aug 26 16:00 128 -> /opt/logstash/patterns/linux-syslog
lr-x------. 1 logstash logstash 64 Aug 26 16:00 129 -> /opt/logstash/patterns/firewalls
l-wx------. 1 logstash logstash 64 Aug 26 16:00 13 -> /var/log/logstash/logstash.log
lr-x------. 1 logstash logstash 64 Aug 26 16:00 130 -> /opt/logstash/patterns/junos
lr-x------. 1 logstash logstash 64 Aug 26 16:00 131 -> /opt/logstash/patterns/postgresql
lr-x------. 1 logstash logstash 64 Aug 26 16:00 132 -> /opt/logstash/patterns/mcollective-patterns
lr-x------. 1 logstash logstash 64 Aug 26 16:00 133 -> /opt/logstash/patterns/mcollective
lr-x------. 1 logstash logstash 64 Aug 26 16:00 134 -> /dev/random
lr-x------. 1 logstash logstash 64 Aug 26 16:00 135 -> pipe:[58096604]
l-wx------. 1 logstash logstash 64 Aug 26 16:00 136 -> pipe:[58096604]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 137 -> [eventpoll]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 138 -> socket:[58099827]
lr-x------. 1 logstash logstash 64 Aug 26 16:00 14 -> /opt/logstash/vendor/geoip/GeoLiteCity.dat
lr-x------. 1 logstash logstash 64 Aug 26 16:00 15 -> /opt/logstash/vendor/bundle/jruby/1.9/gems/http_parser.rb-0.5.3-java/lib/ruby_http_parser.jar
lr-x------. 1 logstash logstash 64 Aug 26 16:00 16 -> /usr/lib/jvm/java-1.7.0-openjdk-1.7.0.51.x86_64/jre/lib/jce.jar
lrwx------. 1 logstash logstash 64 Aug 26 16:00 17 -> socket:[58096475]
lr-x------. 1 logstash logstash 64 Aug 26 16:00 18 -> /opt/logstash/vendor/jar/jruby-complete-1.7.11.jar
lr-x------. 1 logstash logstash 64 Aug 26 16:00 19 -> pipe:[58096479]
l-wx------. 1 logstash logstash 64 Aug 26 15:43 2 -> /var/log/logstash/logstash.err
l-wx------. 1 logstash logstash 64 Aug 26 16:00 20 -> pipe:[58096479]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 21 -> [eventpoll]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 22 -> socket:[58099360]
lr-x------. 1 logstash logstash 64 Aug 26 16:00 23 -> /opt/logstash/patterns/java
lr-x------. 1 logstash logstash 64 Aug 26 16:00 24 -> /opt/logstash/patterns/haproxy
lr-x------. 1 logstash logstash 64 Aug 26 16:00 25 -> /opt/logstash/vendor/geoip/GeoLiteCity.dat
lr-x------. 1 logstash logstash 64 Aug 26 16:00 26 -> /opt/logstash/patterns/redis
lr-x------. 1 logstash logstash 64 Aug 26 16:00 27 -> /usr/lib/jvm/java-1.7.0-openjdk-1.7.0.51.x86_64/jre/lib/ext/sunpkcs11.jar
lr-x------. 1 logstash logstash 64 Aug 26 16:00 28 -> /usr/lib/jvm/java-1.7.0-openjdk-1.7.0.51.x86_64/jre/lib/resources.jar
lr-x------. 1 logstash logstash 64 Aug 26 16:00 29 -> /usr/lib/jvm/java-1.7.0-openjdk-1.7.0.51.x86_64/jre/lib/ext/sunjce_provider.jar
lr-x------. 1 logstash logstash 64 Aug 26 16:00 3 -> /usr/lib/jvm/java-1.7.0-openjdk-1.7.0.51.x86_64/jre/lib/rt.jar
lrwx------. 1 logstash logstash 64 Aug 26 16:00 30 -> socket:[58096403]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 31 -> socket:[58096404]
lr-x------. 1 logstash logstash 64 Aug 26 16:00 32 -> pipe:[58096406]
l-wx------. 1 logstash logstash 64 Aug 26 16:00 33 -> pipe:[58096406]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 34 -> [eventpoll]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 35 -> socket:[58096407]
lr-x------. 1 logstash logstash 64 Aug 26 16:00 36 -> pipe:[58096408]
l-wx------. 1 logstash logstash 64 Aug 26 16:00 37 -> pipe:[58096408]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 38 -> [eventpoll]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 39 -> socket:[58096409]
lr-x------. 1 logstash logstash 64 Aug 26 16:00 4 -> /usr/lib/jvm/java-1.7.0-openjdk-1.7.0.51.x86_64/jre/lib/ext/gnome-java-bridge.jar
lr-x------. 1 logstash logstash 64 Aug 26 16:00 40 -> pipe:[58096410]
l-wx------. 1 logstash logstash 64 Aug 26 16:00 41 -> pipe:[58096410]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 42 -> [eventpoll]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 43 -> socket:[58096411]
lr-x------. 1 logstash logstash 64 Aug 26 16:00 44 -> pipe:[58096412]
l-wx------. 1 logstash logstash 64 Aug 26 16:00 45 -> pipe:[58096412]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 46 -> [eventpoll]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 47 -> socket:[58096413]
lr-x------. 1 logstash logstash 64 Aug 26 16:00 48 -> pipe:[58096414]
l-wx------. 1 logstash logstash 64 Aug 26 16:00 49 -> pipe:[58096414]
lr-x------. 1 logstash logstash 64 Aug 26 16:00 5 -> /usr/lib/jvm/java-1.7.0-openjdk-1.7.0.51.x86_64/jre/lib/ext/pulse-java.jar
lrwx------. 1 logstash logstash 64 Aug 26 16:00 50 -> [eventpoll]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 51 -> socket:[58096415]
lr-x------. 1 logstash logstash 64 Aug 26 16:00 52 -> pipe:[58096416]
l-wx------. 1 logstash logstash 64 Aug 26 16:00 53 -> pipe:[58096416]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 54 -> [eventpoll]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 55 -> socket:[58096417]
lr-x------. 1 logstash logstash 64 Aug 26 16:00 56 -> pipe:[58096418]
l-wx------. 1 logstash logstash 64 Aug 26 16:00 57 -> pipe:[58096418]
lrwx------. 1 logstash logstash 64 Aug 26 16:00 58 -> [eventpoll]
lr-x------. 1 logstash logstash 64 Aug 26 16:00 59 -> /opt/logstash/patterns/ruby
lr-x------. 1 logstash logstash 64 Aug 26 16:00 6 -> /opt/logstash/vendor/jar/jruby-complete-1.7.11.jar
lr-x------. 1 logstash logstash 64 Aug 26 16:00 60 -> /opt/logstash/patterns/mongodb
lr-x------. 1 logstash logstash 64 Aug 26 16:00 61 -> /opt/logstash/patterns/nagios
lr-x------. 1 logstash logstash 64 Aug 26 16:00 62 -> /opt/logstash/patterns/grok-patterns
lr-x------. 1 logstash logstash 64 Aug 26 16:00 63 -> /opt/logstash/patterns/linux-syslog
lr-x------. 1 logstash logstash 64 Aug 26 16:00 64 -> /opt/logstash/patterns/firewalls
lr-x------. 1 logstash logstash 64 Aug 26 16:00 65 -> /opt/logstash/patterns/junos
lr-x------. 1 logstash logstash 64 Aug 26 16:00 66 -> /opt/logstash/patterns/postgresql
lr-x------. 1 logstash logstash 64 Aug 26 16:00 67 -> /opt/logstash/patterns/mcollective-patterns
lr-x------. 1 logstash logstash 64 Aug 26 16:00 68 -> /opt/logstash/patterns/mcollective
lr-x------. 1 logstash logstash 64 Aug 26 16:00 69 -> /opt/logstash/patterns/java
lr-x------. 1 logstash logstash 64 Aug 26 16:00 7 -> /opt/logstash/vendor/bundle/jruby/1.9/gems/json-1.8.1-java/lib/json/ext/parser.jar
lr-x------. 1 logstash logstash 64 Aug 26 16:00 70 -> /opt/logstash/patterns/haproxy
lr-x------. 1 logstash logstash 64 Aug 26 16:00 71 -> /opt/logstash/patterns/redis
lr-x------. 1 logstash logstash 64 Aug 26 16:00 72 -> /opt/logstash/patterns/ruby
lr-x------. 1 logstash logstash 64 Aug 26 16:00 73 -> /opt/logstash/patterns/mongodb
lr-x------. 1 logstash logstash 64 Aug 26 16:00 74 -> /opt/logstash/patterns/nagios
lr-x------. 1 logstash logstash 64 Aug 26 16:00 75 -> /opt/logstash/patterns/grok-patterns
lr-x------. 1 logstash logstash 64 Aug 26 16:00 76 -> /opt/logstash/patterns/linux-syslog
lr-x------. 1 logstash logstash 64 Aug 26 16:00 77 -> /opt/logstash/patterns/firewalls
lr-x------. 1 logstash logstash 64 Aug 26 16:00 78 -> /opt/logstash/patterns/junos
lr-x------. 1 logstash logstash 64 Aug 26 16:00 79 -> /opt/logstash/patterns/postgresql
lr-x------. 1 logstash logstash 64 Aug 26 16:00 8 -> /usr/lib/jvm/java-1.7.0-openjdk-1.7.0.51.x86_64/jre/lib/jsse.jar
lr-x------. 1 logstash logstash 64 Aug 26 16:00 80 -> /opt/logstash/patterns/mcollective-patterns
lr-x------. 1 logstash logstash 64 Aug 26 16:00 81 -> /opt/logstash/patterns/mcollective
lr-x------. 1 logstash logstash 64 Aug 26 16:00 82 -> /opt/logstash/patterns/java
lr-x------. 1 logstash logstash 64 Aug 26 16:00 83 -> /opt/logstash/patterns/haproxy
lr-x------. 1 logstash logstash 64 Aug 26 16:00 84 -> /opt/logstash/patterns/redis
lr-x------. 1 logstash logstash 64 Aug 26 16:00 85 -> /opt/logstash/patterns/ruby
lr-x------. 1 logstash logstash 64 Aug 26 16:00 86 -> /opt/logstash/patterns/mongodb
lr-x------. 1 logstash logstash 64 Aug 26 16:00 87 -> /opt/logstash/patterns/nagios
lr-x------. 1 logstash logstash 64 Aug 26 16:00 88 -> /opt/logstash/patterns/grok-patterns
lr-x------. 1 logstash logstash 64 Aug 26 16:00 89 -> /opt/logstash/patterns/linux-syslog
lr-x------. 1 logstash logstash 64 Aug 26 16:00 9 -> /dev/random
lr-x------. 1 logstash logstash 64 Aug 26 16:00 90 -> /opt/logstash/patterns/firewalls
lr-x------. 1 logstash logstash 64 Aug 26 16:00 91 -> /opt/logstash/patterns/junos
lr-x------. 1 logstash logstash 64 Aug 26 16:00 92 -> /opt/logstash/patterns/postgresql
lr-x------. 1 logstash logstash 64 Aug 26 16:00 93 -> /opt/logstash/patterns/mcollective-patterns
lr-x------. 1 logstash logstash 64 Aug 26 16:00 94 -> /opt/logstash/patterns/mcollective
lr-x------. 1 logstash logstash 64 Aug 26 16:00 95 -> /opt/logstash/patterns/java
lr-x------. 1 logstash logstash 64 Aug 26 16:00 96 -> /opt/logstash/patterns/haproxy
lr-x------. 1 logstash logstash 64 Aug 26 16:00 97 -> /opt/logstash/patterns/redis
lr-x------. 1 logstash logstash 64 Aug 26 16:00 98 -> /opt/logstash/patterns/ruby
lr-x------. 1 logstash logstash 64 Aug 26 16:00 99 -> /opt/logstash/patterns/mongodb
[root@rndlogstash1 fd]# ls -lstr /var/log/logstash; ps auxx |grep logstash
total 1892
8 rw-rr-. 1 logstash logstash 4740 Aug 23 03:21 logstash.log-20140823.gz
0 rw-rw-rw. 1 root root 0 Aug 26 15:42 logstash.err
4 rw-rw-rw. 1 root root 57 Aug 26 15:42 logstash.stdout
1880 rw-rr-. 1 logstash logstash 1924976 Aug 26 16:04 logstash.log
logstash 7775 6.1 5.9 3037432 232792 pts/0 SNl 15:42 1:22 /usr/bin/java -Djava.io.tmpdir=/var/lib/logstash -Xmx500m -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -Djava.awt.headless=true -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -jar /opt/logstash/vendor/jar/jruby-complete-1.7.11.jar -I/opt/logstash/lib /opt/logstash/lib/logstash/runner.rb agent -f /etc/logstash/conf.d -l /var/log/logstash/logstash.log --verbose
root 8134 0.0 0.0 103252 828 pts/0 S+ 16:04 0:00 grep logstash

[root@rndlogstash1 fd]# ls -lstr /var/log/logstash; ps auxx |grep logstash
total 1968
8 rw-rr-. 1 logstash logstash 4740 Aug 23 03:21 logstash.log-20140823.gz
0 rw-rw-rw. 1 root root 0 Aug 26 15:42 logstash.err
4 rw-rw-rw. 1 root root 57 Aug 26 15:42 logstash.stdout
1956 rw-rr-. 1 logstash logstash 2000545 Aug 26 16:05 logstash.log
logstash 7775 5.9 5.9 3037432 232736 pts/0 SNl 15:42 1:23 /usr/bin/java -Djava.io.tmpdir=/var/lib/logstash -Xmx500m -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -Djava.awt.headless=true -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -jar /opt/logstash/vendor/jar/jruby-complete-1.7.11.jar -I/opt/logstash/lib /opt/logstash/lib/logstash/runner.rb agent -f /etc/logstash/conf.d -l /var/log/logstash/logstash.log --verbose
root 8148 0.0 0.0 103252 824 pts/0 S+ 16:05 0:00 grep logstash

[root@rndlogstash1 fd]# ls -lstr /var/log/logstash; ps auxx |grep logstash
total 2296
8 rw-rr-. 1 logstash logstash 4740 Aug 23 03:21 logstash.log-20140823.gz
0 rw-rw-rw. 1 root root 0 Aug 26 15:42 logstash.err
4 rw-rw-rw. 1 root root 57 Aug 26 15:42 logstash.stdout
2284 rw-rr-. 1 logstash logstash 2336477 Aug 26 16:10 logstash.log
root 8526 0.0 0.0 103252 828 pts/0 S+ 16:21 0:00 grep logstash
[root@rndlogstash1 fd]#

nothing in logstash.log except for few parse errors while running:

{:timestamp=>"2014-08-26T16:10:18.231000-0400", :message=>"JSON parse failure. Falling back to plain-text", :error=>#<JSON::ParserError: unexpected token at '2014-08-26 20:15:09 W3SVC4 RQXHWEB1 10.1.37.251 GET /v'>, :data=>"2014-08-26 20:14:49 W3SVC4 RQXHWEB1 10.1.37.251 GET /v2/AP.ContentDeliveryAPI.Service.WebHost/ContentDeliveryAPIService/health - 80 - 10.1.125.246 HTTP/1.1 - - - 10.1.37.251 200 0 0 513 129 15\r\n2014-08-26 20:14:56 W3SVC4 RQXHWEB1 10.1.37.251 GET /v2/AP.ContentDeliveryAPI.Service.WebHost/ContentDeliveryAPIService/health - 80 - 10.1.125.245 HTTP/1.1 - - - 10.1.37.251 200 0 0 513 129 15\r\n2014-08-26 20:14:58 W3SVC4 RQXHWEB1 10.1.37.251 GET /v2/ap.contentdeliveryapi.service.webhost/ContentDeliveryAPIService/search/photo count=1&apikey=FlyersQA&q=Obama%20AND%20creationDate%3C2014-08-27T05%3A10Z 443 - 10.1.125.208 HTTP/1.1 Mozilla/5.0+(Windows+NT;+Windows+NT+6.1;+en-US)+WindowsPowerShell/3.0 - - apiweb-qa.rnd.local 200 0 0 7797 426 109\r\n2014-08-26 20:14:59 W3SVC4 RQXHWEB1 10.1.37.251 GET /v2/AP.ContentDeliveryAPI.Service.WebHost/ContentDeliveryAPIService/health - 80 - 10.1.125.246 HTTP/1.1 - - - 10.1.37.251 200 0 0 513 129 15\r\n2014-08-26 20:15:06 W3SVC4 RQXHWEB1 10.1.37.251 GET /v2/AP.ContentDeliveryAPI.Service.WebHost/ContentDeliveryAPIService/health - 80 - 10.1.125.245 HTTP/1.1 - - - 10.1.37.251 200 0 0 513 129 15\r\n2014-08-26 20:15:09 W3SVC4 RQXHWEB1 10.1.37.251 GET /v2/AP.ContentDeliveryAPI.Service.WebHost/ContentDeliveryAPIService/health - 80 - 10.1.125.246 HTTP/1.1 - - - 10.1.37.251 200 0 0 513 129 15\r\n", :level=>:info}

Status

Assignee

Logstash Developers

Reporter

Chris Denneen