Logstatsh crashing

[dworthcsl]

Hi,

We are running NLS version 1.4.0 on RHEL 7.2. We are currently running a 2 node cluster and over the past several weeks I have noticed to that port 5544 is not listening. This past week I created an XI check to monitor the port for both servers. The last restart of the NLS processes was on Monday of this week. Overnight, logstash seemed to have crash on both servers. Hence port 5544 not listening. I can recover by starting logstash.

I am going to open an email support on this as well, hoping to get some sort of quick resolution. Please let me know if I can provide more information.

Thanks,
David

[hsmith]

If I can catch you before you send the ticket in, please include the /var/log/logstash/logstash.log file if there is any relevant information in it. I have remotes for the next few hours, but I'll try to fit you in today if possible.

[eloyd]

NLS (specifically, elasticsearch) is a memory hog. Without a lot of memory, it will crash. Probably lots.

How much memory is installed on your machine(s)?

[rkennedy]

Closing the thread out, and we'll continue in the ticket. This way, we aren't working through the same issue at two different locations.