pfelk / docker

Deploy pfelk with docker-compose
Apache License 2.0
57 stars 20 forks source link

Logstash crashes during startup "Could not execute action: PipelineAction" #11

Closed massaquah closed 4 years ago

massaquah commented 4 years ago

logstash | [2020-09-03T19:43:32,780][INFO ][logstash.outputs.elasticsearch] Attempting to install template {:manage_template=>{"index_patterns"=>"logstash-", "version"=>60001, "settings"=>{"index.refresh_interval"=>"5s", "number_of_shards"=>1}, "mappings"=>{"dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, "fields"=>{"keyword"=>{"type"=>"keyword", "ignore_above"=>256}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date"}, "@version"=>{"type"=>"keyword"}, "geoip"=>{"dynamic"=>true, "properties"=>{"ip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}} logstash | [2020-09-03T19:43:32,859][INFO ][logstash.outputs.elasticsearch][main] New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["http://elasticsearch:9200"]} logstash | [2020-09-03T19:43:32,864][INFO ][logstash.filters.geoip ][main] Using geoip database {:path=>"/usr/share/logstash/GeoIP/GeoLite2-City.mmdb"} logstash | [2020-09-03T19:43:32,943][INFO ][logstash.outputs.elasticsearch] Using a default mapping template {:es_version=>7, :ecs_compatibility=>:disabled} logstash | [2020-09-03T19:43:33,168][INFO ][logstash.outputs.elasticsearch] Attempting to install template {:manage_template=>{"index_patterns"=>"logstash-", "version"=>60001, "settings"=>{"index.refresh_interval"=>"5s", "number_of_shards"=>1}, "mappings"=>{"dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, "fields"=>{"keyword"=>{"type"=>"keyword", "ignore_above"=>256}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date"}, "@version"=>{"type"=>"keyword"}, "geoip"=>{"dynamic"=>true, "properties"=>{"ip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}} logstash | [2020-09-03T19:43:33,172][ERROR][logstash.agent ] Failed to execute action {:id=>:main, :action_type=>LogStash::ConvergeResult::FailedAction, :message=>"Could not execute action: PipelineAction::Create

, action_result: false", :backtrace=>nil} logstash | [2020-09-03T19:43:33,541][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600} logstash | [2020-09-03T19:43:38,444][INFO ][logstash.runner ] Logstash shut down. logstash | [2020-09-03T19:43:38,538][ERROR][org.logstash.Logstash ] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit

a3ilson commented 4 years ago

Thanks! Working to revise and correct...

a3ilson commented 4 years ago

@massaquah - update/fixed a number of issues. Tested and working...please confirm and close this issue.

massaquah commented 4 years ago

I can confirm that its working now. I just had to edit docker-compose for single node use.