# Elasticsearch input plugin is not working **URL:** \ **Category:** Logstash\ **Created:** [March 1, 2018, 3:09am UTC](https://discuss.elastic.co/t/elasticsearch-input-plugin-is-not-working/121974 "2018-03-01T03:09:14Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![sureshsubramaniyan](https://avatars.discourse-cdn.com/v4/letter/s/a9adbd/32.png) [@sureshsubramaniyan](https://discuss.elastic.co/u/sureshsubramaniyan)\ **Post date:** [March 1, 2018, 3:09am UTC](https://discuss.elastic.co/t/elasticsearch-input-plugin-is-not-working/121974/1 "2018-03-01T03:09:15Z")
getting below while using elasticsearch input plugin , ``` [2018--03-01T02:52:00,652][DEBUG][logstash.pipeline] Pushing flush onto pipeline {:pipeline_id=>"main", :thread=>"#"} [2018-03-01T02:52:02,314][ERROR][logstash.pipeline] A plugin had an unrecoverable error. Will restart this plugin. Pipeline_id:main Plugin: ["https://elasticsearch.domain.com:9200"], user=>"elastic", password=>, ca_file=>"/opt/appl/sslcert.pem", ssl=>true, index=>"index_name", query=>"{ \"query\": { \"query_string\": { \"query\": \"*\" } } }", id=>"4cf31a401ca1da31981b181286e01c4e60c7236bce5a2be56d19c8a2c0138d6f", enable_metric=>true, codec=>"json_cd9e337b-7e73-4c2f-818e-fca2f8341011", enable_metric=>true, charset=>"UTF-8">, size=>1000, scroll=>"1m", docinfo=>false, docinfo_target=>"@metadata", docinfo_fields=>["_index", "_type", "_id"]> Error: Failed to open TCP connection to https:0 (initialize: name or service not known) Exception: Faraday::ConnectionFailed Stack: org/jruby/ext/socket/RubyTCPSocket.java:137:in `initialize' org/jruby/RubyIO.java:1154:in `open' ``` config file : ``` input { elasticsearch { hosts => ["https://elasticsearch.domain.com:9200"] user => "elastic" password => "password" ca_file => "/opt/appl/sslcert.pem" ssl => true index => "index_name" query => '{ "query": { "query_string": { "query": "*" } } }' } } filter { } output { stdout { codec => rubydebug } } ``` Kindly help to rectify the error. ---
**Author:** ![pjanzen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pjanzen/32/13756_2.png) [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Post date:** [March 1, 2018, 8:21am UTC](https://discuss.elastic.co/t/elasticsearch-input-plugin-is-not-working/121974/2 "2018-03-01T08:21:07Z")
Logstash cannot resolve the hostname as far as I can tell... replace the hostname with the ip and try again. > [@sureshsubramaniyan](#): > > hosts =\> ["[https://elasticsearch.domain.com:9200](https://elasticsearch.domain.com:9200)" ] > Error: Failed to open TCP connection to https:0 (initialize: name or service not known) ---
**Author:** ![sureshsubramaniyan](https://avatars.discourse-cdn.com/v4/letter/s/a9adbd/32.png) [@sureshsubramaniyan](https://discuss.elastic.co/u/sureshsubramaniyan)\ **Post date:** [March 5, 2018, 12:28pm UTC](https://discuss.elastic.co/t/elasticsearch-input-plugin-is-not-working/121974/3 "2018-03-05T12:28:00Z")
Hi @pjanzen, thanks for your info , I tried by replacing with ip address , i'm getting below error , ``` [2018-03-05T12:21:51,990][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=>9600} [2018-03-05T12:21:56,942][DEBUG][logstash.pipeline] Pushing flush onto pipeline [2018-03-05T12:21:58,051][ERROR][logstash.pipeline] A plugin had an unrecoverable error. Will restart this plugin. Plugin: ["https://xxx.xxx.xxx.xxx:9200"], user=>"elastic", password=>, ca_file=>"/opt/appl/elasticsearch/sslcert.pem", ssl=>true, index=>"index_name", query=>"{ \"query\": { \"query_string\": { \"query\": \"*\" } } }", id=>"89224d2f13fae562e5191b62e7bd7e2d7e931e8e-1", enable_metric=>true, codec=>"json_d42c0efa-3669-4aab-93de-9a0066f1c575", enable_metric=>true, charset=>"UTF-8">, size=>1000, scroll=>"1m", docinfo=>false, docinfo_target=>"@metadata", docinfo_fields=>["_index", "_type", "_id"]> Error: initialize: name or service not known Exception: Faraday::ConnectionFailed Stack: org/jruby/ext/socket/RubyTCPSocket.java:129:in `initialize' org/jruby/RubyIO.java:1197:in `open' /opt/appl/ELASTIC/logstash/vendor/jruby/lib/ruby/1.9/net/http.rb:763:in `connect' org/jruby/ext/timeout/Timeout.java:98:in `timeout' /opt/appl/ELASTIC/logstash/vendor/jruby/lib/ruby/1.9/net/http.rb:763:in `connect' /opt/appl/ELASTIC/logstash/vendor/jruby/lib/ruby/1.9/net/http.rb:756:in `do_start' /opt/appl/ELASTIC/logstash/vendor/jruby/lib/ruby/1.9/net/http.rb:745:in `start' /opt/appl/ELASTIC/logstash/vendor/jruby/lib/ruby/1.9/net/http.rb:1293:in `request' /opt/appl/ELASTIC/logstash/vendor/bundle/jruby/1.9/gems/faraday-0.9.2/lib/faraday/adapter/net_http.rb:82:in `perform_request' /opt/appl/ELASTIC/logstash/vendor/bundle/jruby/1.9/gems/faraday-0.9.2/lib/faraday/adapter/net_http.rb:40:in `call' /opt/appl/ELASTIC/logstash/vendor/bundle/jruby/1.9/gems/faraday-0.9.2/lib/faraday/adapter/net_http.rb:87:in `with_net_http_connection' /opt/appl/ELASTIC/logstash/vendor/bundle/jruby/1.9/gems/faraday-0.9.2/lib/faraday/adapter/net_http.rb:32:in `call' /opt/appl/ELASTIC/logstash/vendor/bundle/jruby/1.9/gems/faraday-0.9.2/lib/faraday/rack_builder.rb:139:in `build_response' /opt/appl/ELASTIC/logstash/vendor/bundle/jruby/1.9/gems/faraday-0.9.2/lib/faraday/connection.rb:377:in `run_request' /opt/appl/ELASTIC/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-5.0.4/lib/elasticsearch/transport/transport/http/faraday.rb:26:in `perform_request' org/jruby/RubyProc.java:281:in `call' /opt/appl/ELASTIC/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-5.0.4/lib/elasticsearch/transport/transport/base.rb:262:in `perform_request' ``` My current config: ``` input { elasticsearch { hosts => ["https://xxx.xxx.xxx.xxx:9200"] user => "elastic" password => "Password" ca_file => "/opt/appl/elasticsearch/sslcert.pem" ssl => true index => "index_name" query => '{ "query": { "query_string": { "query": "*" } } }' } } filter { } output { stdout { codec => rubydebug } ``` but elasticsearch output plugin is working with both hostnames and Ip Address config : ``` output { elasticsearch { hosts => "https://domain.com:9200" user => "elastic" password => "Password" ssl => true ssl_certificate_verification => true cacert => '/opt/appl/elasticsearch/sslcert.pem' index => "test_%{index_day}" document_id => "%{uniq_id}" } ``` ---
**Author:** ![pjanzen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pjanzen/32/13756_2.png) [@pjanzen](https://discuss.elastic.co/u/pjanzen)\ **Post date:** [March 5, 2018, 4:33pm UTC](https://discuss.elastic.co/t/elasticsearch-input-plugin-is-not-working/121974/4 "2018-03-05T16:33:20Z")
> [@sureshsubramaniyan](#): > > Exception: Faraday::ConnectionFailed From what I can find on the internet (which you probably also have done) is that it could be your certificates. Are those not expired by any change? Also could you test this without SSL? Just to see if this will work? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [April 2, 2018, 4:33pm UTC](https://discuss.elastic.co/t/elasticsearch-input-plugin-is-not-working/121974/5 "2018-04-02T16:33:31Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.