flume-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "周志兴" <376616...@qq.com>
Subject nxlog in(in_file one message size > 65000) out(tcp syslog format) to flume elasticsearchsink have error message
Date Thu, 27 Oct 2016 15:41:58 GMT
27 Oct 2016 08:43:48,127 ERROR [SinkRunner-PollingRunner-DefaultSinkProcessor] (org.apache.flume.sink.elasticsearch.ElasticSearchSink.process:226)
 - Failed to commit transaction. Transaction rolled back. org.apache.flume.EventDeliveryException:
failure in bulk execution: [13]: index [ezr-log-2016-10-27], type [crm], id [AVgDl8YTWnrXBmE7zqqZ],
message [WriteFailureException; nested: MapperParsingException[object mapping for [crm] tried
to parse field [@message] as object, but got EOF, has a concrete value been provided to it?];
] 	at org.apache.flume.sink.elasticsearch.client.ElasticSearchTransportClient.execute(ElasticSearchTransportClient.java:181)
	at org.apache.flume.sink.elasticsearch.ElasticSearchSink.process(ElasticSearchSink.java:206)
	at org.apache.flume.sink.DefaultSinkProcessor.process(DefaultSinkProcessor.java:67) 	at org.apache.flume.SinkRunner$PollingRunner.run(SinkRunner.java:145)
	at java.lang.Thread.run(Thread.java:745) 27 Oct 2016 08:43:48,129 ERROR [SinkRunner-PollingRunner-DefaultSinkProcessor]
(org.apache.flume.SinkRunner$PollingRunner.run:158)  - Unable to deliver event. Exception
follows. org.apache.flume.EventDeliveryException: Failed to commit transaction. Transaction
rolled back. 	at org.apache.flume.sink.elasticsearch.ElasticSearchSink.process(ElasticSearchSink.java:228)
	at org.apache.flume.sink.DefaultSinkProcessor.process(DefaultSinkProcessor.java:67) 	at org.apache.flume.SinkRunner$PollingRunner.run(SinkRunner.java:145)
	at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.flume.EventDeliveryException:
failure in bulk execution: [13]: index [ezr-log-2016-10-27], type [crm], id [AVgDl8YTWnrXBmE7zqqZ],
message [WriteFailureException; nested: MapperParsingException[object mapping for [crm] tried
to parse field [@message] as object, but got EOF, has a concrete value been provided to it?];
] 	at org.apache.flume.sink.elasticsearch.client.ElasticSearchTransportClient.execute(ElasticSearchTransportClient.java:181)
	at org.apache.flume.sink.elasticsearch.ElasticSearchSink.process(ElasticSearchSink.java:206)
	... 3 more
Mime
View raw message