# Elasticsearch: failed to execute bulk item (index) index

**URL:** <https://discuss.elastic.co/t/elasticsearch-failed-to-execute-bulk-item-index-index/184579>\
**Category:** Elasticsearch\
**Created:** [June 6, 2019, 12:15pm UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-execute-bulk-item-index-index/184579 "2019-06-06T12:15:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yashwant\_Shettigar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yashwant_shettigar/32/47652_2.png) [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\
**Post date:** [June 6, 2019, 12:15pm UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-execute-bulk-item-index-index/184579/1 "2019-06-06T12:15:55Z")

</div>

Hi All,

All of sudden, I am getting this error in elastic\_logs. Haven't made any changes. Also, the heap size is set to 8 gb :  
-Xms8g  
-Xmx8g

Logs: -  
[2019-06-06T06:54:42,935][DEBUG][o.e.a.b.TransportShardBulkAction] [xxxxxxxxx] [winlogbeat-2019.06.06][0] failed to execute bulk item (index) index {[winlogbeat-2019.06.06][%{[type]}][Bz1tLGsBel10KW7wMc2l], source[{"agent":{"version":"7.0.0","id":"dc705780-781f-43ca-bcae-294e3397b5c0","ephemeral\_id":"2c2326c0-53a0-45a1-8e9d-b8733f3f9c0b","hostname":"xxxxxxxxxx","type":"winlogbeat"},"ecs":{"version":"1.0.0"},"event":{"created":"2019-06-06T11:19:31.050Z","kind":"event","code":7036},"@timestamp":"2019-06-06T10:15:14.920Z","log":{"level":"information"},"tags":["beats\_input\_codec\_plain\_applied"],"host":{"id":"f8a8e42d-61ad-4e3d-9590-dbd38d386b8f","hostname":"xxxxxxxx","architecture":"x86\_64","name":"xxxxxxxxxxx","os":{"platform":"windows","kernel":"6.3.9600.19304 (winblue\_ltsb\_escrow.190305-1818)","build":"9600.19302","version":"6.3","family":"windows","name":"Windows Server 2012 R2 Standard"}},"winlog":{"provider\_guid":"{555908d1-a6d7-4695-8e1e-26931d2012f4}","keywords":["Classic"],"event\_id":7036,"task":"","api":"wineventlog","provider\_name":"Service Control Manager","channel":"System","event\_data":{"param1":"Software Protection","Binary":"7300700070007300760063002F0034000000","param2":"running"},"computer\_name":"[xxxxx.xxxxx.org](http://xxxxx.xxxxx.org)","record\_id":747052,"process":{"pid":580,"thread":{"id":19248}}},"message":"The Software Protection service entered the running state.","@version":"1"}]}  
[2019-06-06T06:54:42,938][DEBUG][o.e.a.b.TransportShardBulkAction] [xxxxxxx] [winlogbeat-2019.06.06][0] failed to execute bulk item (index) index {[winlogbeat-2019.06.06][%{[type]}][fT1tLGsBel10KW7wMc3E], source[{"ecs":{"version":"1.0.0"},"agent":{"version":"7.0.0","id":"dc705780-781f-43ca-bcae-294e3397b5c0","ephemeral\_id":"2c2326c0-53a0-45a1-8e9d-b8733f3f9c0b","hostname":"xxxxxx..xxxxx","type":"winlogbeat"},"event":{"created":"2019-06-06T11:19:31.067Z","kind":"event","code":7036},"@timestamp":"2019-06-06T11:16:23.772Z","log":{"level":"information"},"tags":["beats\_input\_codec\_plain\_applied"],"host":{"id":"f8a8e42d-61ad-4e3d-9590-dbd38d386b8f","hostname":"xxxxxxxx","architecture":"x86\_64","name":"xxxxxxxxxxx","os":{"platform":"windows","kernel":"6.3.9600.19304 (winblue\_ltsb\_escrow.190305-1818)","build":"9600.19302","version":"6.3","family":"windows","name":"Windows Server 2012 R2 Standard"}},"winlog":{"provider\_guid":"{555908d1-a6d7-4695-8e1e-26931d2012f4}","keywords":["Classic"],"event\_id":7036,"task":"","api":"wineventlog","provider\_name":"Service Control Manager","channel":"System","event\_data":{"param1":"Software Protection","Binary":"7300700070007300760063002F0034000000","param2":"running"},"computer\_name":"[xxxxx.xxxxx.xxxxx.org](http://xxxxx.xxxxx.xxxxx.org)","record\_id":747152,"process":{"pid":580,"thread":{"id":18564}}},"message":"The Software Protection service entered the running state.","@version":"1"}]}

---

<div class="post-metadata">

**Author:** ![xavierfacq](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/xavierfacq/32/8744_2.png) [@xavierfacq](https://discuss.elastic.co/u/xavierfacq)\
**Post date:** [June 6, 2019, 1:35pm UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-execute-bulk-item-index-index/184579/2 "2019-06-06T13:35:17Z")

</div>

Hi,

Do you have more log because there is no reason explain in the trace.

bye,  
Xavier

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 4, 2019, 1:35pm UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-execute-bulk-item-index-index/184579/3 "2019-07-04T13:35:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.