Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

logstash is unable to create index in elasticsearch (Failed to index an event)

Description

Hello

I have following logstash config file:

(I tried different settings, like 'host => "192.168.10.70"' and so on)

And config file of ES is:

If I start logstash with the following command

I get output like:

(Index wasn't created)

ES is up:

Logs of ES:

Software versions: I tried both logstash-1.1.2 & logstash-1.1.4,
elasticsearch - 0.20.0.RC1,
java - openjdk-6-jre-headless 6b24-1.11.4-1ubuntu0.12.04.1,
OS - Ubuntu 12.04 LTS(it's LXC container).

Also I'd like to mention that Graylog2 worked without errors with this ES setup.(however I can't understand why people use graylog if there's a such powerful tool as logstash..)

P.S. full logs of logstash and ES are in attached files

Any help would be appreciated.

Attachments

2

Gliffy Diagrams

Activity

Show:

Yuri November 12, 2012 at 8:52 AM

Yes, now it works like a charm. (Downgraded ES to 0.19.11).

Jordan Sissel November 12, 2012 at 6:24 AM

Agreed. Please try using elasticsearch 0.19.10 first.

Philippe Weber November 12, 2012 at 6:04 AM

ES 0.20RC1 contains breaking changes, I suppose you hit this one:
https://github.com/elasticsearch/elasticsearch/issues/2280

As specified in the docs, http://logstash.net/docs/1.1.5/outputs/elasticsearch,
logstash currently uses ES 0.19.x client, so not yet compatible with 0.20.x

so could you try with a cluster running 0.19.10 and tell us if it works for you.

Fixed

Details

Assignee

Reporter

Affects versions

Created November 9, 2012 at 1:33 PM
Updated April 19, 2013 at 8:38 PM
Resolved November 12, 2012 at 8:52 AM