# ClientProtocolException

**URL:** <https://discuss.elastic.co/t/clientprotocolexception/36515>\
**Category:** Logstash\
**Created:** [December 7, 2015, 10:40am UTC](https://discuss.elastic.co/t/clientprotocolexception/36515 "2015-12-07T10:40:35Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![treehouse](https://avatars.discourse-cdn.com/v4/letter/t/e9a140/32.png) [@treehouse](https://discuss.elastic.co/u/treehouse)\
**Post date:** [December 7, 2015, 10:40am UTC](https://discuss.elastic.co/t/clientprotocolexception/36515/1 "2015-12-07T10:40:35Z")

</div>

Hi all

I'm writing to about 5 sets of indices from logstash. One of those writes is failing for some reason. Event data coming in fairly sporadically (a couple hundred a day).  
Seems like for every event that tries to come into the pipeline we see this --  
`{:timestamp=>"2015-12-02T04:03:03.703000-0800", :message=>"Failed to flush outgoing items", :outgoing_count=>1, :exception=>"Manticore::ClientProtocolException", :backtrace=>["/opt/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.4.4-java/lib/manticore/response.rb:35:ininitialize'",`...  
followed by this:  
`{:timestamp=>"2015-12-02T04:22:52.533000-0800", :message=>"Got error to send bulk of actions: *********************** :80 failed to respond", :level=>:error}`

Is very strange, the majority of my writes are working seamlessly. Can't quite figure out what is special about this particular set of indices. Port 80 is fine here, I'm working with AWS ES service which is hosted on 80.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 8, 2015, 3:45am UTC](https://discuss.elastic.co/t/clientprotocolexception/36515/2 "2015-12-08T03:45:21Z")

</div>

What version are you on?

---

<div class="post-metadata">

**Author:** ![treehouse](https://avatars.discourse-cdn.com/v4/letter/t/e9a140/32.png) [@treehouse](https://discuss.elastic.co/u/treehouse)\
**Post date:** [December 8, 2015, 10:18pm UTC](https://discuss.elastic.co/t/clientprotocolexception/36515/3 "2015-12-08T22:18:53Z")

</div>

`[root@elk-elk-esclient-01 ~]$ /opt/logstash/bin/logstash --version logstash 1.5.4`  
`[root@elk-elk-esclient-01 ~]$ alternatives --config java`  
`There are 2 programs which provide 'java'.`  
`Selection Command`  
`-----------------------------------------------`  
`\* 1 /usr/lib/jvm/java-1.7.0-openjdk-1.7.0.85-2.6.1.2.el7\_1.x86\_64/jre/bin/java

- 2 /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.65-2.b17.el7\_1.x86\_64/jre/bin/java``Enter to keep the current selection[+], or type selection number:`

ES version i'm pretty sure is 1.5.x.. it is AWS ES service and apparently you can't checkout that actual version of ES they are running for you.

Again, just to reiterate bulk of my writes are fine. This index pattern I'm writing to has relatively low traffic but not as low as some of the other index patterns.. also when I refer to index pattern I pretty much just mean `foo-%{+YYYY.MM.dd}`.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 8, 2015, 10:32pm UTC](https://discuss.elastic.co/t/clientprotocolexception/36515/4 "2015-12-08T22:32:30Z")

</div>

Well without access to your ES logs it's probably going to be hard to say.

---

<div class="post-metadata">

**Author:** ![treehouse](https://avatars.discourse-cdn.com/v4/letter/t/e9a140/32.png) [@treehouse](https://discuss.elastic.co/u/treehouse)\
**Post date:** [December 8, 2015, 11:05pm UTC](https://discuss.elastic.co/t/clientprotocolexception/36515/5 "2015-12-08T23:05:15Z")

</div>

OK. submitted an AWS support ticket, i'll keep this updated with findings from there.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:19am UTC](https://discuss.elastic.co/t/clientprotocolexception/36515/6 "2017-07-06T05:19:26Z")

</div>


