2013-12-19 8 views
1

我正在使用logstash和elestic搜索和kibana來挖掘我的日誌。這是工作的罰款,直至昨日卻突然開始給下面的錯誤,我不能夠理解 -LogStash:kibana警報 - 沒有結果沒有結果,因爲沒有找到與您選擇的時間跨度相匹配的索引

No results There were no results because no indices were found that match your selected time span 

logstash日誌中包含以下信息

{:timestamp=>"2013-12-19T17:32:47.612000+0530", :message=>"Using milestone 2 input plugin 'file'. This plugin should be stable, but if you see strange behavior, please let us know! For more inform$ 
{:timestamp=>"2013-12-19T17:32:47.728000+0530", :message=>"You are using a deprecated config setting \"type\" set in multiline. Deprecated settings will continue to work, but are scheduled for rem$ 
{:timestamp=>"2013-12-19T17:32:47.781000+0530", :message=>"You are using a deprecated config setting \"type\" set in grok. Deprecated settings will continue to work, but are scheduled for removal $ 
{:timestamp=>"2013-12-19T17:32:47.839000+0530", :message=>"You are using a deprecated config setting \"type\" set in date. Deprecated settings will continue to work, but are scheduled for removal $ 
Exception in thread "LogStash::Runner" org.jruby.exceptions.RaiseException: (EADDRINUSE) Address already in use - bind - Address already in use 
     at org.jruby.ext.socket.RubyTCPServer.initialize(org/jruby/ext/socket/RubyTCPServer.java:118) 
     at org.jruby.RubyIO.new(org/jruby/RubyIO.java:852) 
     at RUBY.initialize(jar:file:/u001/logparser/tools/logstash/logstash-1.3.1-flatjar.jar!/ftw/server.rb:50) 
     at org.jruby.RubyArray.each(org/jruby/RubyArray.java:1613) 
     at RUBY.initialize(jar:file:/u001/logparser/tools/logstash/logstash-1.3.1-flatjar.jar!/ftw/server.rb:46) 
     at org.jruby.RubyArray.each(org/jruby/RubyArray.java:1613) 
     at RUBY.initialize(jar:file:/u001/logparser/tools/logstash/logstash-1.3.1-flatjar.jar!/ftw/server.rb:34) 
     at RUBY.run(file:/u001/logparser/tools/logstash/logstash-1.3.1-flatjar.jar!/rack/handler/ftw.rb:94) 
     at RUBY.run(file:/u001/logparser/tools/logstash/logstash-1.3.1-flatjar.jar!/logstash/kibana.rb:101) 
+1

'地址已在使用 - 綁定 - 地址已經在使用中,您已經在該端口上運行了一些東西。 – phoet

回答

1

來到logstash響應: elasticsearch路徑的索引你要通過logstash保存數據的地方一直拒絕採集數據。由於反覆敲擊相同的查詢,它使得Java應用程序在同一時間點擊相同的端口。因此它停止logstash應用程序並顯示綁定問題。

來到kibana響應: 檢查映射和elasticsearch其中其試圖保存數據並kibana試圖獲取數據

如果您已經安裝在彈性搜索頭插件索引名和模式,你指數可能在 開始elasticsearch服務見過

bin/elasticsearch -f 然後從你的瀏覽器

http://elasticsearchinstalledip:9201/_plugin/head 
+1

以下也適用,不需要插件:'http:// localhost:9200/_aliases?pretty' – sandstrom