<div dir="ltr"><div><div>Hi,<br></div><br>As I mentioned in a previous post: syslog-ng 3.7 only supports Elasticsearch 1.X. Looking at your logs reveals, that you use Elasticsearch 2.3.3<br><br></div>Bye,<br></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature">Peter Czanik (CzP) &lt;<a href="mailto:peter.czanik@balabit.com" target="_blank">peter.czanik@balabit.com</a>&gt;<br>Balabit / syslog-ng upstream<br><a href="http://czanik.blogs.balabit.com/" target="_blank">http://czanik.blogs.balabit.com/</a><br><a href="https://twitter.com/PCzanik" target="_blank">https://twitter.com/PCzanik</a></div></div>
<br><div class="gmail_quote">On Fri, May 27, 2016 at 2:15 PM, Ivan Adji - Krstev <span dir="ltr">&lt;<a href="mailto:akivanradix@gmail.com" target="_blank">akivanradix@gmail.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div bgcolor="#FFFFFF" text="#000000">
    <font face="Helvetica, Arial, sans-serif">Well i try default one i
      try add cluster.neame: in the .yml file, but still nothing still
      the same error.<br>
      <br>
      [2016-05-27T08:14:29.003329] Error stating pattern database file,
      no automatic reload will be performed; error=&#39;No such file or
      directory&#39;<br>
      [2016-05-27T08:14:29.758816] Add path to classpath:
      //usr/lib64/syslog-ng/java-modules/syslog-ng-core.jar;<br>
      [2016-05-27T08:14:29.759989] Add path to classpath:
      /usr/lib64/syslog-ng/java-modules/dummy.jar;<br>
      [2016-05-27T08:14:29.760284] Add path to classpath:
      /usr/lib64/syslog-ng/java-modules/elastic.jar;<br>
      [2016-05-27T08:14:29.760573] Add path to classpath:
      /usr/lib64/syslog-ng/java-modules/hdfs.jar;<br>
      [2016-05-27T08:14:29.760923] Add path to classpath:
      /usr/lib64/syslog-ng/java-modules/http.jar;<br>
      [2016-05-27T08:14:29.761256] Add path to classpath:
      /usr/lib64/syslog-ng/java-modules/java-modules.jar;<br>
      [2016-05-27T08:14:29.761555] Add path to classpath:
      /usr/lib64/syslog-ng/java-modules/kafka.jar;<br>
      [2016-05-27T08:14:29.761888] Add path to classpath:
      /usr/lib64/syslog-ng/java-modules/log4j-1.2.16.jar;<br>
      [2016-05-27T08:14:29.762193] Add path to classpath:
      /usr/lib64/syslog-ng/java-modules/syslog-ng-common.jar;<br>
      [2016-05-27T08:14:29.762511] Add path to classpath:
      /usr/lib64/syslog-ng/java-modules/syslog-ng-core.jar;<br>
      [2016-05-27T08:14:29.762854] Add path to classpath:
      /usr/share/elasticsearch/lib/HdrHistogram-2.1.6.jar;<br>
      [2016-05-27T08:14:29.763170] Add path to classpath:
      /usr/share/elasticsearch/lib/apache-log4j-extras-1.2.17.jar;<br>
      [2016-05-27T08:14:29.763510] Add path to classpath:
      /usr/share/elasticsearch/lib/commons-cli-1.3.1.jar;<br>
      [2016-05-27T08:14:29.763859] Add path to classpath:
      /usr/share/elasticsearch/lib/compiler-0.8.13.jar;<br>
      [2016-05-27T08:14:29.764128] Add path to classpath:
      /usr/share/elasticsearch/lib/compress-lzf-1.0.2.jar;<br>
      [2016-05-27T08:14:29.764449] Add path to classpath:
      /usr/share/elasticsearch/lib/elasticsearch-2.3.3.jar;<br>
      [2016-05-27T08:14:29.764773] Add path to classpath:
      /usr/share/elasticsearch/lib/guava-18.0.jar;<br>
      [2016-05-27T08:14:29.765098] Add path to classpath:
      /usr/share/elasticsearch/lib/hppc-0.7.1.jar;<br>
      [2016-05-27T08:14:29.765392] Add path to classpath:
      /usr/share/elasticsearch/lib/jackson-core-2.6.6.jar;<br>
      [2016-05-27T08:14:29.765737] Add path to classpath:
      /usr/share/elasticsearch/lib/jackson-dataformat-cbor-2.6.6.jar;<br>
      [2016-05-27T08:14:29.766062] Add path to classpath:
      /usr/share/elasticsearch/lib/jackson-dataformat-smile-2.6.6.jar;<br>
      [2016-05-27T08:14:29.766395] Add path to classpath:
      /usr/share/elasticsearch/lib/jackson-dataformat-yaml-2.6.6.jar;<br>
      [2016-05-27T08:14:29.766945] Add path to classpath:
      /usr/share/elasticsearch/lib/jna-4.1.0.jar;<br>
      [2016-05-27T08:14:29.767245] Add path to classpath:
      /usr/share/elasticsearch/lib/joda-convert-1.2.jar;<br>
      [2016-05-27T08:14:29.767557] Add path to classpath:
      /usr/share/elasticsearch/lib/joda-time-2.8.2.jar;<br>
      [2016-05-27T08:14:29.767950] Add path to classpath:
      /usr/share/elasticsearch/lib/jsr166e-1.1.0.jar;<br>
      [2016-05-27T08:14:29.768251] Add path to classpath:
      /usr/share/elasticsearch/lib/jts-1.13.jar;<br>
      [2016-05-27T08:14:29.768544] Add path to classpath:
      /usr/share/elasticsearch/lib/log4j-1.2.17.jar;<br>
      [2016-05-27T08:14:29.768876] Add path to classpath:
      /usr/share/elasticsearch/lib/lucene-analyzers-common-5.5.0.jar;<br>
      [2016-05-27T08:14:29.769225] Add path to classpath:
      /usr/share/elasticsearch/lib/lucene-backward-codecs-5.5.0.jar;<br>
      [2016-05-27T08:14:29.769570] Add path to classpath:
      /usr/share/elasticsearch/lib/lucene-core-5.5.0.jar;<br>
      [2016-05-27T08:14:29.769900] Add path to classpath:
      /usr/share/elasticsearch/lib/lucene-grouping-5.5.0.jar;<br>
      [2016-05-27T08:14:29.770194] Add path to classpath:
      /usr/share/elasticsearch/lib/lucene-highlighter-5.5.0.jar;<br>
      [2016-05-27T08:14:29.770514] Add path to classpath:
      /usr/share/elasticsearch/lib/lucene-join-5.5.0.jar;<br>
      [2016-05-27T08:14:29.770888] Add path to classpath:
      /usr/share/elasticsearch/lib/lucene-memory-5.5.0.jar;<br>
      [2016-05-27T08:14:29.771187] Add path to classpath:
      /usr/share/elasticsearch/lib/lucene-misc-5.5.0.jar;<br>
      [2016-05-27T08:14:29.771497] Add path to classpath:
      /usr/share/elasticsearch/lib/lucene-queries-5.5.0.jar;<br>
      [2016-05-27T08:14:29.771844] Add path to classpath:
      /usr/share/elasticsearch/lib/lucene-queryparser-5.5.0.jar;<br>
      [2016-05-27T08:14:29.772179] Add path to classpath:
      /usr/share/elasticsearch/lib/lucene-sandbox-5.5.0.jar;<br>
      [2016-05-27T08:14:29.772466] Add path to classpath:
      /usr/share/elasticsearch/lib/lucene-spatial-5.5.0.jar;<br>
      [2016-05-27T08:14:29.772811] Add path to classpath:
      /usr/share/elasticsearch/lib/lucene-spatial3d-5.5.0.jar;<br>
      [2016-05-27T08:14:29.773098] Add path to classpath:
      /usr/share/elasticsearch/lib/lucene-suggest-5.5.0.jar;<br>
      [2016-05-27T08:14:29.773447] Add path to classpath:
      /usr/share/elasticsearch/lib/netty-3.10.5.Final.jar;<br>
      [2016-05-27T08:14:29.773783] Add path to classpath:
      /usr/share/elasticsearch/lib/securesm-1.0.jar;<br>
      [2016-05-27T08:14:29.774055] Add path to classpath:
      /usr/share/elasticsearch/lib/snakeyaml-1.15.jar;<br>
      [2016-05-27T08:14:29.774326] Add path to classpath:
      /usr/share/elasticsearch/lib/spatial4j-0.5.jar;<br>
      [2016-05-27T08:14:29.774572] Add path to classpath:
      /usr/share/elasticsearch/lib/t-digest-3.0.jar;<br>
      [2016-05-27T08:14:32.237017] Add path to classpath:
      //usr/lib64/syslog-ng/java-modules/syslog-ng-core.jar;<br>
      [2016-05-27T08:14:32.372708] Error initializing message pipeline;<br>
      <br>
      Ivan<br>
      <br>
    </font><br>
    <div>On 05/27/2016 02:13 PM, Fabien Wernli
      wrote:<br>
    </div>
    <blockquote type="cite">
      <pre>On Fri, May 27, 2016 at 01:43:29PM +0200, Ivan Adji - Krstev wrote:
</pre>
      <blockquote type="cite">
        <pre>So the cluster should be the cluster name of the ES ? How can i see this
name ? There is nothing in the elasticsearch.yml file, do i have to
specify there ?
</pre>
      </blockquote>
      <pre>by default, it&#39;s elasticsearch

</pre>
      <br>
      <fieldset></fieldset>
      <br>
      <pre>______________________________________________________________________________
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a>

</pre>
    </blockquote>
    <br>
  </div>

<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br></div>