# Aws ES Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down!

**URL:** <https://discuss.elastic.co/t/aws-es-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/162916>\
**Category:** Elasticsearch\
**Created:** [January 4, 2019, 8:56am UTC](https://discuss.elastic.co/t/aws-es-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/162916 "2019-01-04T08:56:10Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![arun5635](https://avatars.discourse-cdn.com/v4/letter/a/c89c15/32.png) [@arun5635](https://discuss.elastic.co/u/arun5635)\
**Post date:** [January 4, 2019, 8:56am UTC](https://discuss.elastic.co/t/aws-es-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/162916/1 "2019-01-04T08:56:10Z")

</div>

HI  
I am trying to push data from logstash to AWS ES and getting below error. Could anyone please me to fix this.

[2019-01-04T08:52:50,757][ERROR][logstash.outputs.elasticsearch] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error\_message=\>"Elasticsearch Unreachable: [http://search-mb-production-app-_**.us-west-2.es.amazonaws.com:80/][Manticore::SocketTimeout] Read timed out", :class=\>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError", :will\_retry\_in\_seconds=\>64}  
[2019-01-04T08:52:53,345][WARN][logstash.outputs.elasticsearch] Restored connection to ES instance {:url=\>"http://search-mb-production-app-**_\*\*.us-west-2.es.amazonaws.com:80/"}

---

<div class="post-metadata">

**Author:** ![arun5635](https://avatars.discourse-cdn.com/v4/letter/a/c89c15/32.png) [@arun5635](https://discuss.elastic.co/u/arun5635)\
**Post date:** [January 4, 2019, 8:57am UTC](https://discuss.elastic.co/t/aws-es-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/162916/2 "2019-01-04T08:57:45Z")

</div>

this is my conf file

input {  
s3 {  
bucket =\> "ecs-production-alb"  
prefix =\> "AWSLogs"  
region =\> "us-west-2"  
type =\> "elblogs"  
codec =\> "plain"  
delete =\> "true"  
secret\_access\_key =\> "Accesskey"  
access\_key\_id =\> "Accesskeyid"  
}  
}

filter {  
grok {  
match =\> {"message" =\> '%{NOTSPACE:request\_type} %{TIMESTAMP\_ISO8601:log\_timestamp} %{NOTSPACE:alb-name} %{NOTSPACE:client} %{NOTSPACE:target} %{NOTSPACE:request\_processing\_time:float} %{NOTSPACE:target\_processing\_time:float} %{NOTSPACE:response\_processing\_time:float} %{NOTSPACE:elb\_status\_code} %{NOTSPACE:target\_status\_code} %{NOTSPACE:received\_bytes:float} %{NOTSPACE:sent\_bytes:float} %{QUOTEDSTRING:request} %{QUOTEDSTRING:user\_agent} %{NOTSPACE:ssl\_cipher} %{NOTSPACE:ssl\_protocol} %{NOTSPACE:target\_group\_arn} %{QUOTEDSTRING:trace\_id}'}  
}   
grok {  
match =\> ["request", "(%{NOTSPACE:http\_method})? (%{NOTSPACE:http\_uri})?"]  
}

```
     grok{
         match => ["target_group_arn","(?<target_group_arn>[/^])(?<target_group>.[^/]*)"]
         }	

mutate {
	 convert => {
          		    "elb_status_code" => "integer"
                    "target_status_code" => "integer"
         		    }

```

}  
}

output {  
file{  
path =\> "/var/log/logstash/alb-accesslogs.log"  
}

```
 elasticsearch {
		hosts => "http://search-mb-production-app-e.us-west-2.es.amazonaws.com:80"
		index => "alb-accesslog-%{+YYYY.MM.dd}"
	      }

```

}

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [January 4, 2019, 9:02am UTC](https://discuss.elastic.co/t/aws-es-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/162916/3 "2019-01-04T09:02:03Z")

</div>

This seems to be exactly the same issue as described in [this thread](https://discuss.elastic.co/t/marking-url-as-dead-last-error-logstash-hostunreachableerror-elasticsearch-unreachable/162761/20). Please do not open multiple threads for the same issue.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [January 4, 2019, 9:02am UTC](https://discuss.elastic.co/t/aws-es-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/162916/4 "2019-01-04T09:02:47Z")

</div>