From a6248632db7ccf5b477e3d118d4f0db276b5b048 Mon Sep 17 00:00:00 2001
From: Clark Boylan <clark.boylan@gmail.com>
Date: Mon, 7 Jul 2014 13:14:01 -0700
Subject: [PATCH] Convert logstash ES output to HTTP.

The logstash elasticsearch output seems to degrade over time and slow
down. Restarting the logstash daemon temporarily corrects this problem.
Switch to the elasticsearch HTTP output to see if that corrects the
problem as well.

Note the logstash watchdog is disabled by this change as logstash
daemons using elasticsearch HTTP output will not join the elasticsearch
cluster which will force the watchdog to always trip. To avoid this
issue disable the watchdog.

Change-Id: I77044b26fa10fb1fc3690a0464d79d55bed2fe00
---
 manifests/watchdog.pp | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/manifests/watchdog.pp b/manifests/watchdog.pp
index ff61a05..8199192 100644
--- a/manifests/watchdog.pp
+++ b/manifests/watchdog.pp
@@ -17,6 +17,7 @@
 # be a 'host:port' string).
 
 class logstash::watchdog (
+  $cron_ensure = 'present',
   $es_api_node = 'localhost'
 ) {
   package { 'jq':
@@ -36,6 +37,7 @@ class logstash::watchdog (
   }
 
   cron { 'logstash-watchdog':
+    ensure      => $cron_ensure,
     minute      => '*/10',
     environment => 'PATH=/bin:/usr/bin:/usr/local/bin',
     command     => "sleep $((RANDOM\%60)) && /usr/local/bin/logstash-watchdog ${es_api_node}",