每次logstash-forwarder有新的日志发送时,都会收到此错误消息。 最终连接被取得,logstash-forwarder输出确认事件已经被处理,但是我希望有办法解决这个错误。
这是一个正在发生的事情的例子:
2015/01/25 18:51:46.116770 Read error looking for ack: EOF 2015/01/25 18:51:46.116831 Loading client ssl certificate: /opt/certs/logstash-forwarder.crt and /opt/certs/logstash-forwarder.key 2015/01/25 18:51:46.276102 Setting trusted CA from file: /opt/certs/logstash-forwarder.crt 2015/01/25 18:51:46.276453 Connecting to <IP>:4545 (<IP>) 2015/01/25 18:51:46.687068 Connected to <IP> 2015/01/25 18:51:46.736755 Read error looking for ack: EOF 2015/01/25 18:51:46.736857 Loading client ssl certificate: /opt/certs/logstash-forwarder.crt and /opt/certs/logstash-forwarder.key 2015/01/25 18:51:46.893790 Setting trusted CA from file: /opt/certs/logstash-forwarder.crt 2015/01/25 18:51:46.894110 Connecting to <IP>:4545 (<IP>) 2015/01/25 18:51:47.261252 Connected to <IP> 2015/01/25 18:51:47.343711 Registrar received 1 events
我想可能有一些超时阈值发生,我有timeout: 15在我的logstash-forwarderconfiguration设置。 这是运送的Logstash服务器没有任何疯狂的负载量,但也许有我可以在那里检查?
显然协议并没有处理来自服务器的缓慢响应。 一位用户指派logstash-forwarder,并在他的叉子“Log Courier”中做出了重大改变,这可能值得一试。