gistfile1.txt

{:timestamp=>"2013-11-20T16:36:11.316000+0000", :message=>"Failed to index an event, will retry", :exception=>org.elasticsearch.discovery.MasterNotDiscoveredException: waited for [1m], :event=>{"@source"=>"tcp://10.36.188.219:50906/", "@tags"=>[], "@fields"=>{"syslog_pri"=>["86"], "syslog_program"=>["CRON"], "received_at"=>["2013-11-20T15:36:01.786Z"], "received_from"=>["10.36.188.219"], "syslog_severity_code"=>6, "syslog_facility_code"=>10, "syslog_facility"=>"security/authorization", "syslog_severity"=>"informational"}, "@timestamp"=>"2013-11-20T15:36:01.000Z", "@source_host"=>"devlogstash", "@source_path"=>"/", "@message"=>" pam_unix(cron:session): session closed for user root", "@type"=>"syslog"}, :level=>:warn}