# Dead Letter Queue - Cannot Write Event to DLQ

**URL:** <https://discuss.elastic.co/t/dead-letter-queue-cannot-write-event-to-dlq/146540>\
**Category:** Logstash\
**Created:** [August 29, 2018, 2:05pm UTC](https://discuss.elastic.co/t/dead-letter-queue-cannot-write-event-to-dlq/146540 "2018-08-29T14:05:16Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jay1](https://avatars.discourse-cdn.com/v4/letter/j/9d8465/32.png) [@Jay1](https://discuss.elastic.co/u/Jay1)\
**Post date:** [August 29, 2018, 2:05pm UTC](https://discuss.elastic.co/t/dead-letter-queue-cannot-write-event-to-dlq/146540/1 "2018-08-29T14:05:16Z")

</div>

Hello , I have enabled DLQ on two different logstash instances running on AWS EC2 as docker container and everything was working fine almost 6+ months . Last week , my DLQ was filled up with 1GB messages and had to drop some fields to process it again . Got the below message on logs which was in line with the happenings at that time

[ERROR][org.logstash.common.io.DeadLetterQueueWriter] cannot write event to DLQ: reached maxQueueSize of 1073741824

The issue is , I still keep getting this message on the logs even after my DLQ was cleared ( right now its just 4KB ) and below is the logstash.yml that I am using

config.reload.automatic: true  
path.data: /apps/logstash/data  
queue.type: persisted  
queue.page\_capacity: 64mb  
queue.max\_bytes: 4gb  
log.level: info  
path.logs: /apps/logstash/log  
dead\_letter\_queue.enable: true

I tried the below to resolve , yet no luck :

1. Deleted the old logstash container and deployed a new container
2. Cleared all the data from DLQ ( including .lock file \_ and restarted the container

Any thoughts on this to fix the inconsistent log messages in logstash

---

<div class="post-metadata">

**Author:** ![Jay1](https://avatars.discourse-cdn.com/v4/letter/j/9d8465/32.png) [@Jay1](https://discuss.elastic.co/u/Jay1)\
**Post date:** [September 6, 2018, 2:26pm UTC](https://discuss.elastic.co/t/dead-letter-queue-cannot-write-event-to-dlq/146540/2 "2018-09-06T14:26:43Z")

</div>

Any thoughts on the above post ? Why Logstash saying reached max queue size reached on dlq though my actual size on DLQ is just 54MB .

Using logstash version 6.2.2

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 4, 2018, 2:26pm UTC](https://discuss.elastic.co/t/dead-letter-queue-cannot-write-event-to-dlq/146540/3 "2018-10-04T14:26:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.