Encountered a retryable error (will retry with exponential backoff) {:code=>413,

[danushkalakmina]

Hi there
i got this error in my logstash while sending logs to the Elasticsearch cluster.When i restarted the logstash service it got fix. But after 1-2 days it will happen recursively.

[2021-12-10T10:17:52,948][ERROR][logstash.outputs.opensearch][main][65ef98198f4701380b183a6cae9af80e6ea76f603b48c371ee10903de85f4f7b] Encountered a retryable error (will retry with exponential backoff) {:code=>413, :url=>"https://example.xxxxxxx.com:443/_bulk", :content_length=>10487824}
[2021-12-10T10:17:53,139][ERROR][logstash.outputs.opensearch][main][65ef98198f4701380b183a6cae9af80e6ea76f603b48c371ee10903de85f4f7b] Encountered a retryable error (will retry with exponential backoff) {:code=>413, :url=>"https://example.xxxxxxx.com:443/_bulk", :content_length=>10487851}
[2021-12-10T10:17:57,300][ERROR][logstash.outputs.opensearch][main][65ef98198f4701380b183a6cae9af80e6ea76f603b48c371ee10903de85f4f7b] Encountered a retryable error (will retry with exponential backoff) {:code=>413, :url=>"https://example.xxxxxxx.com:443/_bulk", :content_length=>10488718}

[AquaX (Andreas Helmer)]

@danushkalakmina

:code=>413

This happens when the request you sent is too large for the server to handle.
Based on the content_length output it looks like your content is increasing every time you try to send it and it's causing problems.
You can adjust the http.max_content_length on elasticsearch (Networking | Elasticsearch Guide [7.15] | Elastic)