Buffer queue is full wait 1 second to re-emit events

Environment

• Red Hat OpenShift Container Platform
  • 3.X

Issue

• Not seeing any new logs in Kibana
• Elasticsearch is not consuming logs from fluentd
• Fluentd logs show:

buffer queue is full. Wait 1 second to re-emit events

Resolution

This error means Fluentd is trying to send logs, but the logs are not being consumed by the log receiver, such as Elasticsearch or an external log aggregator.

In most cases, this is caused when Elasticsearch does not consume logs. Check the logging troubleshooting guide for steps on debugging Fluentd and Elasticsearch.

This is sometimes caused by known issues. See related solutions:

• After reboot new indices not creating in Elasticsearch but reporting as healthy
• BUFFER_QUEUE_LIMIT variable in logging-fluentd DaemonSet is not honoured

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.