SumoLogic/logstash-output-sumologic

Collector returns 502

Closed this issue · 4 comments

im-dim commented

We are getting a lot of intermittent 502 errors like below but some data IS coming to Sumo.
Is there a limit on ingest requests per minute or something?
How can we be sure that we get all data?

[2021-09-02T10:57:57,724][ERROR][logstash.outputs.sumologic][sumo_out] request rejected {:token=>26, :code=>502, :headers=>{"X-Sumo-Client"=>"logstash-output-sumologic", "X-Sumo-Category"=>"elastiflow", "X-Sumo-Host"=>"ct-centos001", "X-Sumo-Name"=>"elastiflow", "Content-Type"=>"text/plain"}, :contet=>"{"event":{"type":"net"}

andrzej-stencel commented

Hi @im-dim, Sumo Logic returns the standard HTTP code 429 Too Many Requests if you hit a request limit. The 502 errors mean a different kind of error on the server side. I recommend you reach to Sumo Logic customer support for this.

im-dim commented

The code we received is 502. not 429.
Please advise...

andrzej-stencel commented

Sorry if I wasn't clear enough. The 502 error code indicates a server issue, other than request limit. Judging by the data you provided, you are NOT being throttled and request limit is NOT the issue. The 502 error means there is an issue on the server side, but the nature of the issue is unknown. As I wrote above, I recommend to reach out to Sumo Logic support to find out more.

im-dim commented