NLS not sending logs

[joppaz]

Hi there,
we've setup a server which was working fine for a while. all of a sudden it we couldnt login, indicating the memory was low, after increasing it we realized that it isnt sending logs.

logstash service status
Loaded: loaded (/etc/init.d/logstash; generated)
Active: active (running) since Mon 2023-01-23 01:35:09 SAST; 1 day 3h ago
Docs: man:systemd-sysv-generator(8)
Tasks: 88 (limit: 9442)
Memory: 846.0M
CGroup: /system.slice/logstash.service
├─ 1044 /bin/java -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -Djava.awt.headless=true -XX:CMSInitiatingOccupancy>
├─801543 start-stop-daemon --stop --pidfile /var/run/logstash/logstash.pid --user nagios --quiet --retry foreve>
└─802522 /bin/java -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -Djava.awt.headless=true -XX:CMSInitiatingOccupancy>

Jan 23 01:35:09 nagiosls1 systemd[1]: This usually indicates unclean termination of a previous run, or service implementatio>
Jan 23 01:35:09 nagiosls1 systemd[1]: Starting LSB: Logstash...
Jan 23 01:35:09 nagiosls1 logstash[802510]: * Starting Logstash Daemon
Jan 23 01:35:09 nagiosls1 logstash[802510]: /etc/init.d/logstash: invalid arguments
Jan 23 01:35:09 nagiosls1 logstash[802510]: ...done.
Jan 23 01:35:09 nagiosls1 systemd[1]: Started LSB: Logstash.
lines 1-17/17 (END)


elasticsearch status

● elasticsearch.service - LSB: Starts elasticsearch
Loaded: loaded (/etc/init.d/elasticsearch; generated)
Active: active (running) since Mon 2023-01-23 14:52:53 SAST; 13h ago
Docs: man:systemd-sysv-generator(8)
Tasks: 61 (limit: 9442)
Memory: 4.2G
CGroup: /system.slice/elasticsearch.service
└─960530 /bin/java -Xms3978m -Xmx3978m -Djava.awt.headless=true -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -XX:CM>

Jan 23 14:52:53 nagiosls1 systemd[1]: Starting LSB: Starts elasticsearch...
Jan 23 14:52:53 nagiosls1 elasticsearch[960479]: * Starting Elasticsearch Server
Jan 23 14:52:53 nagiosls1 elasticsearch[960479]: ...done.
Jan 23 14:52:53 nagiosls1 systemd[1]: Started LSB: Starts elasticsearch.

[eloyd]

Output of "df" command?

[SariyaKarrv]

I would recommend checking your logstash configuration files to ensure they are correctly set up. You might also want to check the logs for any errors that might indicate why the logs are not being sent.

On the other hand, your elasticsearch service seems to be running fine with no issues. However, with a memory usage of 4.2G, you might want to monitor the memory usage and ensure that it doesn't exceed the allocated resources for the server.

If you are still experiencing issues, you might want to consider restarting the services and checking if that resolves the problem. You might also want to contact your server provider for further assistance in resolving the issue.

I hope this helps!