Data coming to journel and not indexing into elasticsearch

Graylog Central (peer support)
1

Hi,
graylog Journel getting data from beats but, its not indexing into elasticsearch. Graylog throws below exception.

2019-07-15 05:36:28,471 ERROR: org.graylog2.plugin.inputs.transports.AbstractTcpTransport - Error in Input [Beats/5d1f3b
484d72b300104d7729] (channel [id: 0x3fbb5dd5, L:/10.244.0.53:5044 ! R:/10.244.0.1:34616]) (cause io.netty.channel.unix.E
rrors$NativeIoException: syscall:read(..) failed: Connection reset by peer)
2019-07-15 05:48:49,633 ERROR: org.graylog2.indexer.fieldtypes.IndexFieldTypePoller - Couldn't get mapping for index <metricbeat_19>: Connection refused (Connection refused).
2019-07-15 05:49:00,641 ERROR: org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical - Couldn't update field ty
pes for index set <Alerts_Input/5d22fee471d334000e97c299>
org.graylog2.indexer.ElasticsearchException: Couldn't collect indices for alias alerts_input_deflector
        at org.graylog2.indexer.cluster.jest.JestUtils.execute(JestUtils.java:51) ~[graylog.jar:?]
        at org.graylog2.indexer.cluster.jest.JestUtils.execute(JestUtils.java:62) ~[graylog.jar:?]
        at org.graylog2.indexer.indices.Indices.aliasTarget(Indices.java:335) ~[graylog.jar:?]
        at org.graylog2.indexer.MongoIndexSet.getActiveWriteIndex(MongoIndexSet.java:204) ~[graylog.jar:?]
        at org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical.lambda$schedule$4(IndexFieldTypePollerPeriodic
al.java:201) ~[graylog.jar:?]
        at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [?:1.8.0_212]
        at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308) [?:1.8.0_212]
        at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.j
ava:180) [?:1.8.0_212]
        at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:294
) [?:1.8.0_212]
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_212]
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_212]
        at java.lang.Thread.run(Thread.java:748) [?:1.8.0_212]
Caused by: org.apache.http.conn.ConnectTimeoutException: Connect to elasticsearch-graylog:9200 [elasticsearch-graylog/10
.0.79.63] failed: connect timed out
        at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.jav
a:151) ~[graylog.jar:?]
        at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:
373) ~[graylog.jar:?]
        
~[graylog.jar:?]
        at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.jav
a:142) ~[graylog.jar:?]
        at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:
373) ~[graylog.jar:?]
        at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:381) ~[graylog.jar:?]
       
        at io.searchbox.client.http.JestHttpClient.execute(JestHttpClient.java:77) ~[graylog.jar:?]
        at org.graylog2.indexer.cluster.jest.JestUtils.execute(JestUtils.java:46) ~[graylog.jar:?]
        ... 11 more

Can anyone help me on this?

Thanks,
Jay’

2

your elasticsearch looks dead

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.