From e3423df338e31e615387d28f6c9aa50053090f12 Mon Sep 17 00:00:00 2001
From: Clark Boylan <clark.boylan@gmail.com>
Date: Mon, 7 Jul 2014 13:14:01 -0700
Subject: [PATCH] Convert logstash ES output to HTTP.

The logstash elasticsearch output seems to degrade over time and slow
down. Restarting the logstash daemon temporarily corrects this problem.
Switch to the elasticsearch HTTP output to see if that corrects the
problem as well.

Note the logstash watchdog is disabled by this change as logstash
daemons using elasticsearch HTTP output will not join the elasticsearch
cluster which will force the watchdog to always trip. To avoid this
issue disable the watchdog.

Change-Id: I77044b26fa10fb1fc3690a0464d79d55bed2fe00
---
 indexer.conf.erb | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/indexer.conf.erb b/indexer.conf.erb
index 5369b80..0a83a86 100644
--- a/indexer.conf.erb
+++ b/indexer.conf.erb
@@ -124,9 +124,8 @@ filter {
 }
 
 output {
-  elasticsearch {
+  elasticsearch_http {
     host => "<%= scope.lookupvar("::openstack_project::logstash_worker::discover_node") %>"
-    node_name => "<%= scope.lookupvar("::hostname") %>"
     manage_template => false
     flush_size => 512
   }