0

Centos 7, elasticsearch 5.x.

I am tracing an issue where elasticsearch becomes non responsive to logstash. (both running locally)

I measure the open handles, as we have had problems on the logstash side with this.

Today, when I run the below:

ls -al /proc/`pgrep -f elasticsearch`/fd

I see something I have never seen before: Some output lines in red (see below).

What does the red mean?

enter image description here

2 Answers2

3

It's a broken symlink. But since those FDs are open on virtual objects it's impossible to resolve them within the context of the filesystem regardless.

2

From this link

Red: Archive file
Red with black background: Broken link

In your case, those are broken links.