使用ElasticSearch輸出時，Logstash錯誤消息=>“無法刷新外發項目”

Question

我在Debian上使用ES 1.4.4，LS 1.5和Kibana 4。 我啟動了logstash，它在幾分鍾內正常工作，然后出現致命錯誤。 為了關閉logstash，我必須刪除存儲在ES中的最新數據，這是我發現的唯一方法。 另一個相關的事實是，Elastic Search看起來還可以，我可以在kibana中看到舊數據，並且插件頭工作正常。 我的輸出配置：輸出{elasticsearch {端口=> 9200協議=> http主機=>“ 127.0.0.1”}}

任何幫助將不勝感激 ：）

這是完整的錯誤消息：在127.0.0.1處發送大量操作到elasticsearch服務器時出錯：讀取超時{：level =>：error}

無法刷新傳出項目{：outgoing_count => 1362，：exception =>＃，：backtrace => [“ / opt / logstash / vendor / bundle / jruby / 1.9 / gems / manticore-0.3.5-java / lib / manticore /response.rb:35:in initialize'“，” org / jruby / RubyProc.java：271：incall'“，” /opt/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.3.5-java /lib/manticore/response.rb:61：in call'“，” /opt/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.3.5-java/lib/manticore/response.rb:224： incall_once'“，” /opt/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.3.5-java/lib/manticore/response.rb:127:in code'，“ // opt / logstash / vendor /bundle/jruby/1.9/gems/elasticsearch-transport-1.0.7/lib/elasticsearch/transport/transport/http/manticore.rb:50:inperform_request'“，” org / jruby / RubyProc.java：271：in call '“，” /opt/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.7/lib/elasticsearch/transport/transport/base.rb:187:inperform_request'“，” // opt / logstash /vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.7/lib/elasticsearch/transport/trans port / http / manticore.rb：33：在perform_request中“，” /opt/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.7/lib/elasticsearch/transport/client.rb:115 ：inperform_request'“，” /opt/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-api-1.0.7/lib/elasticsearch/api/actions/bulk.rb:80:in bulk'，“ / opt / logstash / vendor / bundle / jruby / 1.9 / gems / logstash-output-elasticsearch-0.1.18-java / lib / logstash / outputs / elasticsearch / protocol.rb：82：inbulk'“，” // opt / logstash / vendor / bundle / jruby / 1.9 / gems / logstash-output-elasticsearch-0.1.18-java / lib / logstash / outputs / elasticsearch.rb：413：in Submit'“，” / opt / logstash / vendor / bundle / jruby /1.9/gems/logstash-output-elasticsearch-0.1.18-java/lib/logstash/outputs/elasticsearch.rb:412:insubmit'“，” /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash -output-elasticsearch-0.1.18-java / lib / logstash / outputs / elasticsearch.rb：438：in flush'“，” /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch- 0.1.18-java / lib / logstash / outputs / elasticsearch.rb：436： inflush'“，” / opt / logstash / vendor / bundle / jruby / 1.9 / gems / stud-0.0.19 / lib / stud / buffer.rb：219：in buffer_flush'“，” org / jruby / RubyHash.java： 1341：ineach'“，” /opt/logstash/vendor/bundle/jruby/1.9/gems/stud-0.0.19/lib/stud/buffer.rb:216:in buffer_flush'“，” // opt / logstash / vendor /bundle/jruby/1.9/gems/stud-0.0.19/lib/stud/buffer.rb:193:inbuffer_flush'“，” /opt/logstash/vendor/bundle/jruby/1.9/gems/stud-0.0.19 /lib/stud/buffer.rb:159:in buffer_receive'“，” /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-0.1.18-java/lib/logstash/outputs/ elasticsearch.rb：402：inreceive'“，” /opt/logstash/lib/logstash/outputs/base.rb:88:in handle'“，”（eval）：1070：ininitialize'“，” org / jruby / RubyArray .java：1613：in each'“，” org / jruby / RubyEnumerable.java：805：inflat_map'“，”（eval）：1067：in initialize'“，” org / jruby / RubyProc.java：271：incall' “，” / opt / logstash / lib / logstash / pipeline.rb：279：在輸出中“，” / opt / logstash / lib / logstash / pipeline.rb：235：inoutputworker'“，” / opt / logstash / lib /logstash/pipeline.rb:163:in `start_outputs'“]，：level =>：warn}

Answer 1

您的Elasticsearch已超過存儲空間，無法寫入來自logstash的新文檔，請嘗試刪除舊索引，然后

PUT your_index/_settings
{
  "index": {
  "blocks.read_only": false
  }
} 

希望這對您有用。 謝謝 ！！