[2020-05-26T17:59:29,435][ERROR][logstash.outputs.elasticsearch][main][6286b14da4febadbf6b521991fe9dc9d011c6f3bdb1ee16e9be4527536d2d765] Encountered a retryable error. Will Retry with exponential backoff {:code=>413, :url=>"http://localhost:9200/_bulk"}
413 indicates the payload that logstash is sending to elasticsearch is too large. It does not really make sense for the elasticsearch output to retry this, because if the payload is too large the first time then it will still be too large when retried.
If you want to change it at the elasticsearch end you could increase http.max_content_length from its default of 100MB, but a better solution might be to reduce pipeline.batch.size in logstash.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.