# Elasticsearch shutdowns every few days with this error

**URL:** <https://discuss.elastic.co/t/elasticsearch-shutdowns-every-few-days-with-this-error/308271>\
**Category:** Elasticsearch\
**Created:** [June 27, 2022, 3:50pm UTC](https://discuss.elastic.co/t/elasticsearch-shutdowns-every-few-days-with-this-error/308271 "2022-06-27T15:50:23Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Harshil\_Narielwala](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/harshil_narielwala/32/54024_2.png) [@Harshil\_Narielwala](https://discuss.elastic.co/u/Harshil_Narielwala)\
**Post date:** [June 27, 2022, 3:50pm UTC](https://discuss.elastic.co/t/elasticsearch-shutdowns-every-few-days-with-this-error/308271/1 "2022-06-27T15:50:23Z")

</div>

My elasticsearch instance is connected to an application server I.e Liferay as a search engine.  
I am getting the below error randomly every few days.

Can anyone explain what this means and how can I solve this?

[2022-06-26T23:59:35,269][WARN][o.e.t.TcpTransport] [elasticsearchnode\_1] invalid internal transport message format, got (4a,52,4d,49), [Netty4TcpChannel{localAddress=/_._._._:9300, remoteAddress=/_._._._:52254}], closing connection  
[2022-06-26T23:59:41,302][WARN][o.e.t.TcpTransport] [elasticsearchnode\_1] invalid internal transport message format, got (80,0,0,28), [Netty4TcpChannel{localAddress=/_._._._:9300, remoteAddress=/_._._._:33000}], closing connection  
[2022-06-26T23:59:41,533][WARN][o.e.t.TcpTransport] [elasticsearchnode\_1] invalid internal transport message format, got (0,1e,0,6), [Netty4TcpChannel{localAddress=/_._._._:9300, remoteAddress=/_._._._:33210}], closing connection  
[2022-06-26T23:59:41,764][WARN][o.e.t.TcpTransport] [elasticsearchnode\_1] invalid internal transport message format, got (48,45,4c,50), [Netty4TcpChannel{localAddress=/_._._._:9300, remoteAddress=/_._._._:33348}], closing connection  
[2022-06-26T23:59:41,991][WARN][o.e.t.TcpTransport] [elasticsearchnode\_1] SSL/TLS request received but SSL/TLS is not enabled on this node, got (16,3,0,0), [Netty4TcpChannel{localAddress=/_._._._:9300, remoteAddress=/_._._._:33528}], closing connection  
[2022-06-26T23:59:42,223][WARN][o.e.t.TcpTransport] [elasticsearchnode\_1] SSL/TLS request received but SSL/TLS is not enabled on this node, got (16,3,0,0), [Netty4TcpChannel{localAddress=/_._._._:9300, remoteAddress=/_._._._:33696}], closing connection  
[2022-06-26T23:59:42,449][WARN][o.e.t.TcpTransport] [elasticsearchnode\_1] invalid internal transport message format, got (0,0,0,71), [Netty4TcpChannel{localAddress=/_._._._:9300, remoteAddress=/_._._._:33862}], closing connection  
[2022-06-26T23:59:42,681][WARN][o.e.t.TcpTransport] [elasticsearchnode\_1] invalid internal transport message format, got (0,0,0,a4), [Netty4TcpChannel{localAddress=/_._._._:9300, remoteAddress=/_._._._:34042}], closing connection  
[2022-06-26T23:59:42,907][WARN][o.e.t.TcpTransport] [elasticsearchnode\_1] invalid internal transport message format, got (6c,0,b,0), [Netty4TcpChannel{localAddress=/_._._._:9300, remoteAddress=/_._._._:34176}], closing connection  
[2022-06-26T23:59:43,536][WARN][o.e.t.TcpTransport] [elasticsearchnode\_1] SSL/TLS request received but SSL/TLS is not enabled on this node, got (16,3,0,0), [Netty4TcpChannel{localAddress=/_._._._:9300, remoteAddress=/_._._._:34576}], closing connection  
[2022-06-26T23:59:43,590][WARN][o.e.t.TcpTransport] [elasticsearchnode\_1] invalid internal transport message format, got (e,0,0,0), [Netty4TcpChannel{localAddress=/_._._._:9300, remoteAddress=/_._._._:34736}], closing connection  
[2022-06-26T23:59:43,840][WARN][o.e.t.TcpTransport] [elasticsearchnode\_1] SSL/TLS request received but SSL/TLS is not enabled on this node, got (16,3,0,0), [Netty4TcpChannel{localAddress=/_._._._:9300, remoteAddress=/_._._._:34986}], closing connection  
[2022-06-26T23:59:53,721][WARN][o.e.t.TcpTransport] [elasticsearchnode\_1] SSL/TLS request received but SSL/TLS is not enabled on this node, got (16,3,1,2), [Netty4TcpChannel{localAddress=/_._._._:9300, remoteAddress=/_._._._:40696}], closing connection

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 28, 2022, 12:41am UTC](https://discuss.elastic.co/t/elasticsearch-shutdowns-every-few-days-with-this-error/308271/2 "2022-06-28T00:41:04Z")

</div>

Just to be clear - there are no errors there, only warnings. And there's nothing there that shows Elasticsearch shutting down, as your title mentions.

> [@Harshil\_Narielwala](#):
>
> SSL/TLS request received but SSL/TLS is not enabled on this node

This one seems pretty clear, you will need to find the source and see why it's wanting to use TLS - which we would recommend using anyway.

> [@Harshil\_Narielwala](#):
>
> invalid internal transport message format, got

It's possible that something is wanting to talk to Elasticsearch via the HTTP API (ie on port 9200), but it's sending it to the transport API (ie port 9300).

(Also, please format your code/logs/config using the `</>` button, or markdown style back ticks. It helps to make things easy to read which helps us help you 🙂)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 26, 2022, 12:41am UTC](https://discuss.elastic.co/t/elasticsearch-shutdowns-every-few-days-with-this-error/308271/3 "2022-07-26T00:41:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
