Encountered a retryable error (will retry with exponential backoff) {:code=>413,

Elastic Stack Logstash
1

Hi there
i got this error in my logstash while sending logs to the Elasticsearch cluster.When i restarted the logstash service it got fix. But after 1-2 days it will happen recursively.

[2021-12-10T10:17:52,948][ERROR][logstash.outputs.opensearch][main][65ef98198f4701380b183a6cae9af80e6ea76f603b48c371ee10903de85f4f7b] Encountered a retryable error (will retry with exponential backoff) {:code=>413, :url=>"https://example.xxxxxxx.com:443/_bulk", :content_length=>10487824}
[2021-12-10T10:17:53,139][ERROR][logstash.outputs.opensearch][main][65ef98198f4701380b183a6cae9af80e6ea76f603b48c371ee10903de85f4f7b] Encountered a retryable error (will retry with exponential backoff) {:code=>413, :url=>"https://example.xxxxxxx.com:443/_bulk", :content_length=>10487851}
[2021-12-10T10:17:57,300][ERROR][logstash.outputs.opensearch][main][65ef98198f4701380b183a6cae9af80e6ea76f603b48c371ee10903de85f4f7b] Encountered a retryable error (will retry with exponential backoff) {:code=>413, :url=>"https://example.xxxxxxx.com:443/_bulk", :content_length=>10488718}
2

This happens when the request you sent is too large for the server to handle.
Based on the content_length output it looks like your content is increasing every time you try to send it and it's causing problems.
You can adjust the http.max_content_length on elasticsearch (Networking | Elasticsearch Guide [7.15] | Elastic)

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.