{
"_index": "logstash-2017.06.19",
"_type": "mediawiki",
"_id": "AVzBSFRqrHtES4E5g7xd",
"_score": null,
"_source": {
"db_server": "10.64.48.22",
"method": "Wikimedia\\Rdbms\\DatabaseMysqlBase::open",
"level": "ERROR",
"wiki": "aawiki",
"channel": "DBConnection",
"mwversion": "1.30.0-wmf.5",
"message": "Error connecting to 10.64.48.22: :real_connect(): (42000/1049): Unknown database 'aawiki'",
"type": "mediawiki",
"error": ":real_connect(): (42000/1049): Unknown database 'aawiki'",
"normalized_message": "Error connecting to {db_server}: {error}",
"tags": [
"syslog",
"es",
"es"
],
"reqId": "5ffae18505b5fa49bbe86b0d",
"@timestamp": "2017-06-19T16:56:01.000Z",
"db_name": "aawiki",
"db_user": "wikiadmin",
"@version": 1,
"host": "terbium",
"shard": "s3"
},
"fields": {
"@timestamp": [
1497891361000
]
},
"sort": [
1497891361000
]
}If you check, someone is trying to connect to aawiki on an enwiki (s1) shard, and it is not there. Could be some maintenance task using aawiki, when in reality it uses a specific wiki (tries to connect to it)? I do not have enough info on the error to track where this is coming from.