Last modified: 2014-10-22 23:04:59 UTC
{:timestamp=>"2014-10-17T15:15:54.242000+0000", :message=>"syslog udp listener died", :address=>"0.0.0.0:10514", :exception=>#<SocketError: initialize: name or service not known>, :backtrace=>["org/jruby/ext/socket/RubyUDPSocket.java:106:in `initialize'", "org/jruby/ext/socket/RubyUDPSocket.java:115:in `initialize'", "org/jruby/RubyIO.java:852:in `new'", "/opt/logstash/lib/logstash/inputs/syslog.rb:115:in `udp_listener'", "/opt/logstash/lib/logstash/inputs/syslog.rb:76:in `run'"], :level=>:warn} {:timestamp=>"2014-10-17T15:15:54.242000+0000", :message=>"syslog tcp listener died", :address=>"0.0.0.0:10514", :exception=>#<SocketError: initialize: name or service not known>, :backtrace=>["org/jruby/ext/socket/RubyTCPServer.java:126:in `initialize'", "org/jruby/RubyIO.java:852:in `new'", "/opt/logstash/lib/logstash/inputs/syslog.rb:135:in `tcp_listener'", "/opt/logstash/lib/logstash/inputs/syslog.rb:90:in `run'"], :level=>:warn}
This seems to be logged only when multiple logstash service instances are running at the same time. Now the question is what is causing multiple services to be started in the first place?
Apparently we have two logstash init files? * /etc/init/logstash.conf * /etc/init.d/logstash
$ dpkg -S /etc/init.d/logstash logstash: /etc/init.d/logstash $ dpkg -S /etc/init/logstash.conf logstash: /etc/init/logstash.conf $ dpkg -L logstash | grep /etc /etc /etc/init.d /etc/init.d/logstash /etc/init.d/logstash-web /etc/default /etc/default/logstash /etc/default/logstash-web /etc/logstash /etc/logstash/conf.d /etc/logrotate.d /etc/logrotate.d/logstash /etc/init /etc/init/logstash.conf /etc/init/logstash-web.conf
Looks like we will need to add some puppet logic to clean up the crappy upstream packaging. :( I guess that's what we get for importing a package that isn't blessed by Debian.
Change 168199 had a related patch set uploaded by BryanDavis: logstash: Remove upstart jobs https://gerrit.wikimedia.org/r/168199
Change 168199 merged by RobH: logstash: Remove upstart jobs https://gerrit.wikimedia.org/r/168199
