# Cant feed data into ES

**URL:** https://discuss.elastic.co/t/cant-feed-data-into-es/106168
**Category:** Logstash
**Created:** [November 2, 2017, 10:15am UTC](https://discuss.elastic.co/t/cant-feed-data-into-es/106168 "2017-11-02T10:15:25Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![RandomDude](https://avatars.discourse-cdn.com/v4/letter/r/82dd89/32.png) [@RandomDude](https://discuss.elastic.co/u/RandomDude)
#### Post date: [November 2, 2017, 10:15am UTC](https://discuss.elastic.co/t/cant-feed-data-into-es/106168/1 "2017-11-02T10:15:26Z")

</div>

Hello,

I have setup a server with ES, kibana and logstash.

When I try to feed data to ES using logstash, I get

```
[2017-11-02T10:38:55,197][INFO][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://logstash_system:xxxxxx@localhost:9200/, :path=>"/"} [2017-11-02T10:38:55,333][WARN][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://logstash_system:xxxxxx@localhost:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :error=>"Got response code '401' contacting Elasticsearch at URL 'http://localhost:9200/'"}

```

Which looks like logstash\_system user can't authentify/access ES.

I changed logstash\_system user's password, following the setup XPACK security doc.

Do I need to tell ES that logstash\_system has a custom password ? What is logstash\_system default password ?

When I

```
curl -u logstash_system -XGET http://localhost:9200/

```

And use the logstash password I've set, I get a correct response ("you know, for search" default response).

The logstash user I use for writting is logstash\_writer, another user.

logstash.conf :

```
input {
  file {
       path => "/a/cool/path"
       start_position => "beginning"
       sincedb_path => "/dev/null"
  }
}

filter {
       csv {
           separator => ","
           columns => ["column", "column2"]
        }
}

output {
        elasticsearch {
                      user => "logstash_writer"
                      password => "pswd"
                      hosts => "http://localhost:9200"
                      index => "index"
        }
        stdout { codec => rubydebug }
}

```

Thanks

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 30, 2017, 10:16am UTC](https://discuss.elastic.co/t/cant-feed-data-into-es/106168/2 "2017-11-30T10:16:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.