Nagios Support Forum

One update: Running logstash in debug, I observed the error "The shutdown process appears to be stalled due to busy or blocked plugins" which might suggest my S3 plugin is receiving data at a slow pace. This seems to be somewhat common with S3 bucket logs. I'm not sure how to remedy this y...

Hi TMCDonald- I have been unable to resolve the S3 log pull from ElasticSearch to Logstash>>Kibana. /var/log/logstash/logstash.com warning is "Logstash S3 input, stop reading in the middle of the file, we will read it again when logstash is started". If you can offer any guidance on why th...

Thanks again cdienger. Greatly appreciated.

Yes- /var/log/logstash/logstash.log. I haven't seen the error reappear since defining charset => "ISO-8859-1, but still not seeing the S3 logs show up in ElasticSearch. If I can trouble you with one last question. If you don't define "Input" within Global Config input web browser, I p...

Thanks a lot cdienger. I did have my region set correctly, but removing the input{} fixed the initial verify error & started to producing events in logstash.log. The S3 log source is still not showing up as a source in LMS-elasticsearch and I'm now seeing "Logstash S3 input, stop reading in...

I was hoping someone could help me out here. I have Cisco Managed S3 bucket containing gzip files which I need to pull into my CentOS Nagios LMS. Using the below GC input example, I always get the "configuration could not be verified" when doing a SAVE>>APPLY. I'm not seeing any relevant e...

Thanks Scott. Nagios offers instructions to disable the replica shards on a single instance-but not much detail on why it matters. I guess just so admins don't have to see that yellow warning in the cluster health status. I can live with that, LOL!!

I'm new to Nagios LMS and found that the Nagios log server we're using at my work had Replica shards enabled even though we only have a single instance running. The steps to disable Replica shards looks trivial, but we're probably going to add a 2nd instance in the next 6 months or so. Is there any ...

I work with Syed and we were able to get to root cause yesterday. Entries were added in the core config which seemed to create conflicts. Possibly a port being defined twice. What made this challenging is LMS seem to run for days under this config and the error logs we audited somewhat put us on a w...

Thank you guys. I'm just getting familiar with Nagios LMS. Really appreciate the advice here.