FreeBSD Port: sysutils/logstash5

[Michael Landin]

hi,

It seems since the ES (and logstash5) 5.3.0 -> 5.6.8 the log-rotation 
(log4j2) is no longer working ?

ES is correctly started :

29156  0- I        5397:38.18 /usr/local/openjdk8/bin/java -Xms8g -Xmx8g 
-XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 
-XX:+UseCMSInitiatingOccupancyOnly -XX:+DisableExplicitGC 
-XX:+AlwaysPreTouch -server -Djava.awt.headless=true 
-Dfile.encoding=UTF-8 -Djna.nosys=true -Dio.netty.noUnsafe=true 
-Dio.netty.noKeySetOptimization=true -Dlog4j.shutdownHookEnabled=false 
-Dlog4j2.disable.jmx=true -Dlog4j.skipJansi=true 
-XX:+HeapDumpOnOutOfMemoryError 
-Des.path.home=/usr/local/lib/elasticsearch -cp 
/usr/local/lib/elasticsearch/lib/* 
org.elasticsearch.bootstrap.Elasticsearch -d 
--pidfile=/var/run/elasticsearch/elasticsearch.pid 
-Epath.conf=/usr/local/etc/elasticsearch

Upgrade was done the 26/3/18  :
  ❯ ls -alt /var/log/elasticsearch
total 16286
drwxr-xr-x  2 elasticsearch  elasticsearch         83 Mar 30 13:56 .
-rw-r--r--  1 elasticsearch  elasticsearch  119977419 Mar 30 10:46 
jaf_deprecation.log
drwxr-xr-x  6 root           wheel                 64 Mar 30 09:00 ..
-rw-r--r--  1 elasticsearch  elasticsearch    5408903 Mar 28 16:15 
jaf.log
-rw-r--r--  1 elasticsearch  elasticsearch    2180721 Mar 26 22:47 
jaf-2018-03-26.log
-rw-r--r--  1 elasticsearch  elasticsearch      49059 Mar 24 13:57 
jaf-2018-03-24.log
-rw-r--r--  1 elasticsearch  elasticsearch    2101479 Mar 23 13:28 
jaf-2018-03-23.log
-rw-r--r--  1 elasticsearch  elasticsearch      49569 Mar 22 11:31 
jaf-2018-03-22.log
-rw-r--r--  1 elasticsearch  elasticsearch     366249 Mar 21 10:19 
jaf-2018-03-21.log


My log4j2 policy looks correct:

appender.rolling.type = RollingFile
appender.rolling.name = rolling
appender.rolling.fileName = 
${sys:es.logs.base_path}${sys:file.separator}${sys:es.logs.cluster_name}.log
appender.rolling.layout.type = PatternLayout
appender.rolling.layout.pattern = [%d{ISO8601}][%-5p][%-25c{1.}] 
%marker%.-10000m%n
appender.rolling.filePattern = 
${sys:es.logs.base_path}${sys:file.separator}${sys:es.logs.cluster_name}-%d{yyyy-MM-dd}.log
appender.rolling.policies.type = Policies
appender.rolling.policies.time.type = TimeBasedTriggeringPolicy
appender.rolling.policies.time.interval = 1
appender.rolling.policies.time.modulate = true


Same issue for logstash5.


Thanks,


/mich