Both Logstash and Elastic Search have stopped

[SuryanuSanyal]

Hi Team,
Both Logstash and Elastic Search have stopped. Kindly provide the commands to start them.

Attached screenshot

[SuryanuSanyal]

However both of them showing in running state when executing the following commands inside putty
service logstash status
service elasticsearch status

[ssax]

Please PM me a copy of your profile, you can download it from Admin > System Status by clicking the Download System Profile button.

[SuryanuSanyal]

I am able to download but not able to extract. So I used the following command
[user@<MachineName> /]# sudo /usr/local/nagioslogserver/scripts/profile.sh
system-profile/
system-profile/timestamp.txt
system-profile/lsversion.txt
system-profile/masters.txt
system-profile/nodes.txt
system-profile/shard-health.txt
system-profile/shard-status.txt
system-profile/indices-status.txt
system-profile/jvm-status.txt
system-profile/cluster.txt
system-profile/pending-tasks.txt
system-profile/recovery.txt
system-profile/plugins.txt
system-profile/logstash-plugins.txt
system-profile/memory.txt
system-profile/psaux.txt
system-profile/netstat.txt
system-profile/disk.txt
system-profile/network.txt
system-profile/iptables.txt
system-profile/firewalld.txt
system-profile/logstash-confd/
system-profile/logstash-confd/000_inputs.conf
system-profile/logstash-confd/500_filters.conf
system-profile/logstash-confd/501_live_filters.conf
system-profile/logstash-confd/998_live_outputs.conf
system-profile/logstash-confd/999_outputs.conf
system-profile/store.txt
system-profile/apachelogs/
system-profile/apachelogs/access_log
system-profile/apachelogs/error_log
system-profile/systemlog.txt
system-profile/elasticsearchlog/
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df.log
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df_index_indexing_slowlog.log
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df_index_search_slowlog.log
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df.log.4.gz
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df.log.6.gz
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df.log.3.gz
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df.log.2.gz
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df.log.1.gz
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df.log.7.gz
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df.log.5.gz
system-profile/logstashlogs/
system-profile/logstashlogs/logstash.log
system-profile/logstashlogs/logstash.log.1.gz
system-profile/logstashlogs/logstash.log.2.gz

[pbroste]

Hello @SuryanuSanyal

When you state that you are unable extract it? You do see the 'System Profile" in the /tmp/ directory and it is in a tar.gz compressed format. If you would like to extract the System Profile before you send it over you can use the following command:

Code: Select all

tar -xvf system-profile.tar.gz

If you find that it is too big to send please use the split --bytes=50M /tmp/system-profile.tar.gz systemprofileparts

Please then send each systemprofilepartsx in separate PM messages.

Thanks,
Perry

[SuryanuSanyal]

I have PM you the system profile. Please check and let me know the solution to resolve this

[pbroste]

Hello @SuryanSanyal

Thanks for sending over the 'Profile', I get a "tar: Error is not recoverable: exiting now" error message and want to have you go ahead and re-run the script from the following command:

Code: Select all

rm /usr/local/nagioslogserver/scripts/profile.sh && /usr/local/nagioslogserver/scripts/profile.sh

Please PM the results found in '/tmp/system-profile.tar.gz'

Thanks,
Perry