ElasticSearch 1.0, Logstash changes – how to complete the upgrade


ElasticSearch has recently announced on it’s new version 1.0 which includes many new features as well as stability and availability fixes.

The ones who worked with Logstash shippers or Logstash indexers that were shipping logs into Elastic search, probably encountered this error

warn: org.elasticsearch.discovery.zen.ping.unicast: [agent zero] failed to send ping to [[#zen_unicast_1#

or perhaps


Now, please take a look on you logstash config file,

it may contain

input {
file {path => “/<your_path/yourlog.log” codec => <your_codec>}
output {
stdout { debug => true debug_format => “json”}

elasticsearch {

host => “”

…  }

Now the change that should be done is changing the “elasticsearch” section to  “elasticsearch_http”

You can read about it’s options here : http://www.logstash.net/docs/1.3.3/outputs/elasticsearch_http

Restart Logstash, and it will work.

* Also please make sure that when working with ElasticSearch 1.0, you will work with Logstash 1.3.3  it is very recommended to upgrade the logstash version from time to time.



Tagged with: , ,
Posted in ElasticSearch

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: