Bulk index cannot split output batch any further

Hi,

I’ve been getting the following errors in the graylog log for some time do you know what this means?

ERROR [BlockingBatchedESOutput] Unable to flush message buffer
java.lang.RuntimeException: java.util.concurrent.ExecutionException: ElasticsearchException{message=Bulk index cannot split output batch any further., errorDetails=}
at org.graylog2.indexer.messages.Messages.runBulkRequest(Messages.java:208) ~[graylog.jar:?]
at org.graylog2.indexer.messages.Messages.bulkIndexRequests(Messages.java:129) ~[graylog.jar:?]
at org.graylog2.indexer.messages.Messages.bulkIndex(Messages.java:125) ~[graylog.jar:?]
at org.graylog2.indexer.messages.Messages.bulkIndex(Messages.java:113) ~[graylog.jar:?]
at org.graylog2.outputs.ElasticSearchOutput.writeMessageEntries(ElasticSearchOutput.java:111) ~[graylog.jar:?]
at org.graylog2.outputs.BlockingBatchedESOutput.flush(BlockingBatchedESOutput.java:129) [graylog.jar:?]
at org.graylog2.outputs.BlockingBatchedESOutput.writeMessageEntry(BlockingBatchedESOutput.java:110) [graylog.jar:?]
at org.graylog2.outputs.BlockingBatchedESOutput.write(BlockingBatchedESOutput.java:92) [graylog.jar:?]
at org.graylog2.buffers.processors.OutputBufferProcessor$1.run(OutputBufferProcessor.java:191) [graylog.jar:?]
at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:180) [graylog.jar:?]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [?:1.8.0_292]
at java.util.concurrent.FutureTask.run(FutureTask.java:266) [?:1.8.0_292]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_292]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_292]
at java.lang.Thread.run(Thread.java:748) [?:1.8.0_292]
Caused by: java.util.concurrent.ExecutionException: ElasticsearchException{message=Bulk index cannot split output batch any further., errorDetails=}
at com.github.rholder.retry.Retryer$ExceptionAttempt.(Retryer.java:254) ~[graylog.jar:?]
at com.github.rholder.retry.Retryer.call(Retryer.java:163) ~[graylog.jar:?]
at org.graylog2.indexer.messages.Messages.runBulkRequest(Messages.java:201) ~[graylog.jar:?]

Hello,

Have you check the health on Elasticsearch? There are a couple of commands you can use.

ES Health Check
curl -XGET http://localhost:9200/_cluster/health?pretty=true

Check Shards
curl -XGET http://localhost:9200/_cat/shards

ES Shard Info
curl -XGET http://localhost:9200/_cluster/allocation/explain?pretty

Here are a similar issue, maybe something in there might help

Hope that helps

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.