Application Delivery Management
Application Modernization & Connectivity
CyberRes
IT Operations Management
ACCESS MANAGER DASHBOARD TROUBLESHOOTING
Contents
1. Logstash Troubleshooting. 1
1.1. Log Level Setting (With Restart) 1
1.2. Log Level Setting (Without Restart) 2
2. Elasticsearch Troubleshooting. 3
2.1. Log Level Setting (With Restart) 3
2.2. Log Level Setting (Without Restart) 4
3. Elasticsearch Queries For Troubleshooting. 4
3.1. Get Elasticsearch Version. 4
3.2. Retrieve Events Based On eventid. 4
3.3. Retrieve Events Based On Time. 5
3.4. Retrieve all Events other than given eventid. 5
3.5. Retrieve Events Based On Eventid And Time. 6
3.6. Retrieve Events Matching Any One Of The Eventid’s. 7
You can set the log level for logstash to view the output in the respective log file location.
Ensure to restart the service after making any change.
# path.plugins: []
You can dynamically update logging levels through the logging API. These settings are effective immediately and do not need a restart. Please ensure this has to run as curl command in linux terminal.
You can set the log level for elasticsearch to view the output in the respective log file location. Ensure to restart the service after making any change.
You can also dynamically update logging levels through API. These settings are effective immediately and do not need a restart.
PUT /_cluster/settings
{
"transient": {
"<name of logging hierarchy>": "<level>"
}
For Example:
PUT /_cluster/settings
{
"transient": {
"logger.org.elasticsearch.action": "trace"
}
}
PUT /_cluster/settings
{
"transient": {
"logger.org.elasticsearch.action.bulk.TransportShardBulkAction": "trace"
}
}
PUT /_cluster/settings
{
"transient": {
"logger.org.elasticsearch.action.bulk.TransportShardBulkAction": null
}
}
GET /
GET _index_name/_search
{
"query":
{"match": {
"eventID": "002E000A"
}}
}
GET _index_name/_search
{
"query": {
"range" : {
"createDate": {
"gte" : "now-15m",
"lt" : "now"
}
}
}
}
GET _index_name/_search
{ "query": {
"bool": {
"must_not": {
"match": {
"eventID": "002E000A"
}
}
}
}
}
GET _index_name/_search
{ "query": {
"bool": {
"must": [{
"match": {
"eventID": "002E000A"
}
},
{
"range": {
"createDate": {
"gte": "now-15m",
"lt": "now"
}
}
}
]
}
}
}
GET _index_name/_search
{ "query": {
"bool": {
"should" : [
{ "match" : { "eventID": "002E000A" } },
{ "match" : { "eventID": "002E000C" } }
]
}
}
}