# Attempted to resurrect connection to dead ES instance
**URL:** https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/358120
**Category:** Logstash
**Tags:** docker
**Created:** [April 24, 2024, 12:28pm UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/358120 "2024-04-24T12:28:56Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@samsu](https://discuss.elastic.co/u/samsu)
#### Post date: [April 24, 2024, 12:28pm UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/358120/1 "2024-04-24T12:28:56Z")
i have this error :
```auto
[2024-04-24T12:24:55,861][INFO][logstash.outputs.elasticsearch][main] Failed to perform request {:message=>"Connect to localhost:9200 [localhost/127.0.0.1] failed: Connection refused (Connection refused)", :exception=>Manticore::SocketException, :cause=>org.apache.http.conn.HttpHostConnectException: Connect to localhost:9200 [localhost/127.0.0.1] failed: Connection refused (Connection refused)}
[2024-04-24T12:24:55,863][WARN][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://exfo:xxxxxx@localhost:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :message=>"Elasticsearch Unreachable: [https://localhost:9200/][Manticore::SocketException] Connect to localhost:9200 [localhost/127.0.0.1] failed: Connection refused (Connection refused)"}
```
elasticsearch.yml
```auto
cluster.name: "docker-cluster"
xpack.security.enabled: false
```
logstash.yml
```auto
http.host: "0.0.0.0"
```
logstash.conf
```auto
# Sample Logstash configuration for creating a simple
# Beats -> Logstash -> Elasticsearch pipeline.
input {
file {
path => "/usr/share/logstash/config/test.csv"
start_position => "beginning"
sincedb_path => "/dev/null"
}
}
filter {
csv {
separator => ";"
columns => ["aa", "bb" , "cc"]
}
}
output {
elasticsearch {
hosts => ["https://localhost:9200"]
#index => "index"
user => "elastic"
password => "pass"
ssl => true
#cacert => "/usr/share/logstash/config/http_ca.crt"
}
}
```
---
### Author:  [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [April 24, 2024, 12:58pm UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/358120/2 "2024-04-24T12:58:54Z")
This error means that your logstash cannot connect to your Elasticsearch.
Are they running on the same machine/container? Using `localhost` means that logstash and elasticsearch are running on the same place.
How are you running both logstash and elasticsearch?
> [@samsu](#):
>
> ```auto
> cluster.name: "docker-cluster"
> xpack.security.enabled: false
>
> ```
You need to share your entire `elasticsearch.yml`, this is not enough, also, if you disabled security you can remove the `user`, `password` and `ssl` settings from your logstash output.
> [@samsu](#):
>
> `http.host: "0.0.0.0"`
This configuration in `logstash.yml` is irrelevant for this issue, this is related to the Logstash monitoring API only.
---
### Author:  [@samsu](https://discuss.elastic.co/u/samsu)
#### Post date: [April 24, 2024, 1:15pm UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/358120/3 "2024-04-24T13:15:03Z")
i use docker to run elasticsearch and logstash , so that's mean they are running on the same place ,?
how can i configure elasticsearch.yml ?,
---
### Author:  [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [April 24, 2024, 1:52pm UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/358120/4 "2024-04-24T13:52:11Z")
> [@samsu](#):
>
> i use docker to run elasticsearch and logstash , so that's mean they are running on the same place ,?
But where is your Logstash running? Inside a container or on the host machine? And where is your Elasticsearch running? Inside a container or on the host machine? You need to provide these informations, also provide how are you running it, with docker compose? Using docker cli?
---
### Author:  [@samsu](https://discuss.elastic.co/u/samsu)
#### Post date: [April 24, 2024, 2:12pm UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/358120/5 "2024-04-24T14:12:57Z")
they are running in different container , with docker cli
---
### Author:  [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [April 24, 2024, 2:19pm UTC](https://discuss.elastic.co/t/attempted-to-resurrect-connection-to-dead-es-instance/358120/6 "2024-04-24T14:19:24Z")
> [@samsu](#):
>
> they are running in different container
If they are running in different containers, then you cannot use `localhost` in the logstash elasticsearch output.
`localhost` means the **same** host or the **same** container, since they are running in different containers you need to use the container name or the host ip if you are exposing the ports.