Log4j输出到Logstash Software caused connection abort: socket write error问题

来源：互联网发布：中国环保产业数据编辑：程序博客网时间：2024/06/14 10:41

log4j:WARN Detected problem with connection: java.net.SocketException: Software caused connection abort: socket write error

logstash配置

input {
stdin { }
log4j { }
}
output {
elasticsearch { hosts => ["localhost:9200"] }
stdout { codec => rubydebug }
}

log4j配置

log4j.rootLogger=DEBUG,socket# for package com.demo.elk, log would be sent to socket appender.#log4j.logger.com.demo.elk=DEBUG, socket# appender socketlog4j.appender.socket=org.apache.log4j.net.SocketAppenderlog4j.appender.socket.Port=4560log4j.appender.socket.RemoteHost=localhostlog4j.appender.socket.layout=org.apache.log4j.PatternLayoutlog4j.appender.socket.layout.ConversionPattern=%d [%-5p] [%l] %m%nlog4j.appender.socket.ReconnectionDelay=100log4j.appender.logstash.LocationInfo=true# appender consolelog4j.appender.console=org.apache.log4j.ConsoleAppenderlog4j.appender.console.target=System.outlog4j.appender.console.layout=org.apache.log4j.PatternLayoutlog4j.appender.console.layout.ConversionPattern=%d [%-5p] [%l] %m%n

log4j版本是1.x

elk的版本都是5.x

logstash的版本换成2.x就没有这个错误

楼下有人评论了

是插件原因，你看看官方的文档就知道了，log5.0之后去除了不少插件。要自己编译安装。在github上有下载，github.com/logstash-plugins/logstash-input-log4j

0 1