Differences

This shows you the differences between two versions of the page.

--- resolution_area:watchdog_resolutions:res-w9239 [2022/11/08 12:46] – 10.91.129.17
+++ resolution_area:watchdog_resolutions:res-w9239 [2022/11/08 14:25] (current) – 10.91.129.17
@@ Line 9: / Line 9: @@
   * "Data too large" -  Kibana and/or elastic search service has failed on the esk (elk stack) server
   * "failed to parse field" - this indicates an error with agent parsing
-Kibana and/or elastic search service has failed on the esk (elk stack) server, usually due to the error message "Data too large". If error message contains "failed to parse
-**Resolution:** Check if kibana and elastic search service are running. Usually restarting elastic search, even if it's running, followed by kibana, will fix the issue.
+**Resolution:** Check if kibana and elastic search service are running. Usually restarting elastic search, even if it's running, followed by kibana, will fix the issue.
+If you get the parse field error you will need to track down the agent causing the issue; this is not as serious as the "Data too large" issue.
 **Manual Action Steps:**

Internal Errigal Collaboration Wiki