Comments (10)
Same issue here, connected to https://logstash.jira.com/browse/LOGSTASH-1253
from logstash-forwarder.
A random server is chosen every time a new connection is needed, and you can specify a list of addresses and/or use DNS to provide this 'list of servers'.
As far as I can tell, your request, "make lumberjack reconnect so that they are shipping to a randomly picked logstash" is already implemented and has been for some time.
from logstash-forwarder.
Seeing the same issue, lumberjacks are connected. We TERM logstash (target server). The lumberjacks detect that the connection is dead. When we restart logstash, they show re-connected (logstash pipeline is still not up yet), once it is up the lumberjacks still continually disconnect and reconnect. No events are sent.
I restart the agents, same thing
2013/11/21 15:20:08.851457 Read error looking for ack: read tcp 192.168.166.62:5043: i/o timeout
2013/11/21 15:20:08.851604 Loading client ssl certificate: ./lumberjack.crt and ./lumberjack.key
2013/11/21 15:20:09.151422 Setting trusted CA from file: ./lumberjack.crt
2013/11/21 15:20:09.151827 Connecting to 192.168.166.62:5043 (10.6.166.62)
2013/11/21 15:20:09.215137 Connected to 192.168.166.62
from logstash-forwarder.
The FIX:
If we create an iptables rule to block inbound 5043 (on logstash server), and let logstash fully boot up until the pipeline is logged as ready. When we then remove the iptables rule, then the agents correctly connect and send events….. It seems to me that logstash (lumberjack input) should NOT start listening on the declared port, until AFTER logstash is fully booted up and ready.
from logstash-forwarder.
The iptables workarround works (thx bitsofinfo), but this is kinda ugly.
This behaviour still exists in LS 1.4.0.
Any dev following this thread ?
from logstash-forwarder.
Hi,
Its a protocol issue. Because log stash pipeline not up, it fills immediately on first receive of events, then next receive it blocks waiting - thus eventually a timeout.
I fixed it in PR. It separates the connections from the pipeline, so the connections can do "keep-alives" while it waits for the pipeline to start moving again / initialise.
#180
My fork has it merged in and should work OK. It requires a change to the jls-lumberjack gem on the Logstash side though.
@alphazero-es is now working on the project here as we speak so maybe he'll get around to looking at protocol related issues like this soon :)
Jason
from logstash-forwarder.
Hi - I suppose it's worth adding that #180 might not completely fix it - sometimes I've seen with slow initialise it can still timeout.
It makes LogStash aim to respond within a maximum of 5 seconds. Logstash forwarder times out by default after 15 seconds.
So just increase the network timeout value in forwarder. You could probably even ignore my PR completely and just increase the network timeout. To be fair my PR was to solve slow or stalled pipeline, as opposed to starting up.
from logstash-forwarder.
When I tried to increase the timeout to 60s, it didn't solve the issue completly, and some LF could never connect to LS.
Thx for the tip though. :)
from logstash-forwarder.
Is this still an issue?
from logstash-forwarder.
Closing I'm not sure this is still a problem. Please open a new ticket if so.
from logstash-forwarder.
Related Issues (20)
- Logstash Forwarder Keeps Rotated Files Open HOT 5
- Beta4 -> RC1, send fail
- logstash-forwarder tcp input HOT 4
- rotate logstash forwarder's log HOT 4
- Logstash-forwarder cannot get data from the beginning. HOT 2
- way to override 24hr inactivity in a file harvester? HOT 2
- logstash forwarder HOT 1
- how to exclude files using pattern HOT 1
- tailing log file not registering events (logstash forwarder with -tail=true) HOT 1
- Make offset field in LSF optional HOT 1
- Filebeat - transport.go:125: SSL client failed to connect with: read tcp connection reset by peer HOT 1
- logstash multiline codec not working as expected
- how to set logstash-forward encoding HOT 1
- Received fatal alert: bad_certificate HOT 2
- Minor miss in lumberjack documentation HOT 2
- Logstash-forwarder exclude gzip files HOT 7
- c HOT 1
- Run on the ARM (RaspberryPi) HOT 1
- Update Lumberjack documentation to latest
- How to update logstash 8.9.1 to 8.12.02
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from logstash-forwarder.