Encountered a retryable error. Will Retry with exponential backoff code=>413

413 indicates the payload that logstash is sending to elasticsearch is too large. It does not really make sense for the elasticsearch output to retry this, because if the payload is too large the first time then it will still be too large when retried.

If you want to change it at the elasticsearch end you could increase http.max_content_length from its default of 100MB, but a better solution might be to reduce pipeline.batch.size in logstash.