# Attempted to resurrect connection to dead ES instance in secure ELK

**URL:** <https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-in-secure-elk/282989>\
**Category:** Logstash\
**Created:** [September 1, 2021, 6:05am UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-in-secure-elk/282989 "2021-09-01T06:05:04Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![kiran80511](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kiran80511/32/80487_2.png) [@kiran80511](https://discuss.elastic.co/u/kiran80511)\
**Post date:** [September 1, 2021, 6:05am UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-in-secure-elk/282989/1 "2021-09-01T06:05:04Z")

</div>

Hi,  
I am using version 7.14 for elasticsearch, logstash and kibana .  
In logstash log I got this error:

```auto
Sep 01 10:43:09 elastic.sys logstash[2975]: [2021-09-01T10:43:09,352][WARN][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://logstash_writer:xxxxxx@elastic.sys:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :message=>"Elasticsearch Unreachable: [https://logstash_writer:xxxxxx@elastic.sys:9200/][Manticore::SocketException] Connection refused (Connection refused)"}

```

This is my conf file

```auto
input {
udp {
port => 5044
type => "syslog"
}
}
output {
  elasticsearch {
ilm_enabled => false
    hosts => ["https://elastic.sys:9200"]
    cacert => "/etc/logstash/certs/ca.crt"
    user => "logstash_writer"
    password => "QGqqEqLxtCfA1OsZgYQA"
      index => "syslog"
}
  stdout { codec => rubydebug }
}

```

Please help

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 1, 2021, 10:12pm UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-in-secure-elk/282989/2 "2021-09-01T22:12:54Z")

</div>

> [@kiran80511](#):
>
> `Connection refused`

Can you `curl elastic.sys:9200` from the Logstash host?

---

<div class="post-metadata">

**Author:** ![kiran80511](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kiran80511/32/80487_2.png) [@kiran80511](https://discuss.elastic.co/u/kiran80511)\
**Post date:** [September 2, 2021, 4:56am UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-in-secure-elk/282989/3 "2021-09-02T04:56:48Z")

</div>

Hello sir,

This is the output

```auto
[root@elastic ~]# curl -XGET https://logstash_writer:QGqqEqLxtCfA1OsZgYQA@elastic.sys:9200/
{
  "name" : "elastic",
  "cluster_name" : "elasticsearch",
  "cluster_uuid" : "f1L8GhrxQdehL2gS0JksDQ",
  "version" : {
    "number" : "7.14.0",
    "build_flavor" : "default",
    "build_type" : "rpm",
    "build_hash" : "dd5a0a2acaa2045ff9624f3729fc8a6f40835aa1",
    "build_date" : "2021-07-29T20:49:32.864135063Z",
    "build_snapshot" : false,
    "lucene_version" : "8.9.0",
    "minimum_wire_compatibility_version" : "6.8.0",
    "minimum_index_compatibility_version" : "6.0.0-beta1"
  },
  "tagline" : "You Know, for Search"
}

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 30, 2021, 4:56am UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance-in-secure-elk/282989/4 "2021-09-30T04:56:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.