我们已经将ELK堆栈从6.4版本升级到6.8.20版本。Elasticsearch和Kibana升级后没有出现任何问题。但我们观察到Logstash服务在升级后不断重启。
弹性：6.8.20
Kibana:6.8.20
Logstash:6.8.20
我们在Logstash中找到了以下错误日志。
[ERROR][logstash.pipeline ] Error registering plugin {:pipeline_id=>"main", :plugin=>"<LogStash::Inputs::Beats codec=><LogStash::Codecs::JSON id=>"json :error=>"cannot link Java class io.netty.handler.ssl.OpenSsl, probable missing dependency: io.netty.internal.tcnative.SSLContext.setCipherSuite(JLjava/lang/String;Z)Z", :thread=>"#<Thread:0x4768d63d run>"}
[2021-11-25T09:49:30,071][ERROR][logstash.pipeline ] Pipeline aborted due to error {:pipeline_id=>"main", :exception=>#<NameError: cannot link Java class io.netty.handler.ssl.OpenSsl, probable missing dependency: io.netty.internal.tcnative.SSLContext.setCipherSuite(JLjava/lang/String;Z)Z>, :backtrace=>["org/jruby/javasupport/JavaClass.java:292:in `for_name'", "org/jruby/javasupport/JavaClass.java:288:in `for_name'", "org/jruby/javasupport/JavaUtilities.java:38:in `get_proxy_class'", "uri:classloader:/jruby/java/core_ext/object.rb:44:in `block in java_import'", "org/jruby/RubyArray.java:2577:in `map'", "uri:classloader:/jruby/java/core_ext/object.rb:37:in `java_import'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-beats-5.1.9-java/lib/logstash/inputs/beats.rb:146:in `register'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:259:in `register_plugin'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:270:in `block in register_plugins'", "org/jruby/RubyArray.java:1792:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:270:in `register_plugins'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:413:in `start_inputs'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:311:in `start_workers'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:217:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:176:in `block in start'"], :thread=>"#<Thread:0x4367d63d run>"}
[2021-11-25T09:49:30,091][ERROR][logstash.agent
[ERROR][logstash.pipeline ] Error registering plugin {:pipeline_id=>"main", :plugin=>"<LogStash::Inputs::Beats codec=><LogStash::Codecs::JSON id=>"json :error=>"cannot link Java class io.netty.handler.ssl.OpenSsl, probable missing dependency: io.netty.internal.tcnative.SSLContext.setCipherSuite(JLjava/lang/String;Z)Z", :thread=>"#<Thread:0x4768d63d run>"}
我们在从6.4升级ELK升级日志时无法解决此问题-->6.8->7.15.为了解决这个问题，我们直接将Logstash升级到7.15(所有其他组件都是6.8弹性、kibana、filebeat等(。
7.15(或7.12(版本自带JDK，并消除了单独安装JDK的必要性。此外，用JRUBY编写的编解码器在这里也非常完美。
我实际上遇到了这个问题，因为在http输入插件之前列出了beats输入插件(虽然很奇怪，但这确实解决了我的问题(
https://discuss.elastic.co/t/error-registering-plugin-beats-input/295596/2