You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@flume.apache.org by 周志兴 <37...@qq.com> on 2016/10/27 15:41:58 UTC
nxlog in（in_file one message size > 65000） out（tcp syslog format） to flume elasticsearchsink have error message
27 Oct 2016 08:43:48,127 ERROR [SinkRunner-PollingRunner-DefaultSinkProcessor] (org.apache.flume.sink.elasticsearch.ElasticSearchSink.process:226) - Failed to commit transaction. Transaction rolled back. org.apache.flume.EventDeliveryException: failure in bulk execution: [13]: index [ezr-log-2016-10-27], type [crm], id [AVgDl8YTWnrXBmE7zqqZ], message [WriteFailureException; nested: MapperParsingException[object mapping for [crm] tried to parse field [@message] as object, but got EOF, has a concrete value been provided to it?]; ] at org.apache.flume.sink.elasticsearch.client.ElasticSearchTransportClient.execute(ElasticSearchTransportClient.java:181) at org.apache.flume.sink.elasticsearch.ElasticSearchSink.process(ElasticSearchSink.java:206) at org.apache.flume.sink.DefaultSinkProcessor.process(DefaultSinkProcessor.java:67) at org.apache.flume.SinkRunner$PollingRunner.run(SinkRunner.java:145) at java.lang.Thread.run(Thread.java:745) 27 Oct 2016 08:43:48,129 ERROR [SinkRunner-PollingRunner-DefaultSinkProcessor] (org.apache.flume.SinkRunner$PollingRunner.run:158) - Unable to deliver event. Exception follows. org.apache.flume.EventDeliveryException: Failed to commit transaction. Transaction rolled back. at org.apache.flume.sink.elasticsearch.ElasticSearchSink.process(ElasticSearchSink.java:228) at org.apache.flume.sink.DefaultSinkProcessor.process(DefaultSinkProcessor.java:67) at org.apache.flume.SinkRunner$PollingRunner.run(SinkRunner.java:145) at java.lang.Thread.run(Thread.java:745) Caused by: org.apache.flume.EventDeliveryException: failure in bulk execution: [13]: index [ezr-log-2016-10-27], type [crm], id [AVgDl8YTWnrXBmE7zqqZ], message [WriteFailureException; nested: MapperParsingException[object mapping for [crm] tried to parse field [@message] as object, but got EOF, has a concrete value been provided to it?]; ] at org.apache.flume.sink.elasticsearch.client.ElasticSearchTransportClient.execute(ElasticSearchTransportClient.java:181) at org.apache.flume.sink.elasticsearch.ElasticSearchSink.process(ElasticSearchSink.java:206) ... 3 more