# Error LogStash::Inputs::Elasticsearch

**URL:** <https://discuss.elastic.co/t/error-logstash-elasticsearch/139363>\
**Category:** Logstash\
**Created:** [July 10, 2018, 2:03pm UTC](https://discuss.elastic.co/t/error-logstash-elasticsearch/139363 "2018-07-10T14:03:28Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![npontes](https://avatars.discourse-cdn.com/v4/letter/n/ba8739/32.png) [@npontes](https://discuss.elastic.co/u/npontes)\
**Post date:** [July 10, 2018, 2:03pm UTC](https://discuss.elastic.co/t/error-logstash-elasticsearch/139363/1 "2018-07-10T14:03:28Z")

</div>

Hello everyone,

I have a .conf file which I will execute (logstash -f file.conf -w 1) to extract data from ES to a csv file.  
I can do it perfectly on my dev machine.

The problem is when we try to execute it on machine, it'll return an error.

```
"/logstash-6.3.0/bin/logstash" -f "/file.conf" -w 1

Sending Logstash's logs to /products/duas_data/LR_RE7/nodefiles/logstash-6.3.0/logs which is now configured via log4j2.properties
[2018-07-09T12:11:18,588][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
[2018-07-09T12:11:19,175][INFO][logstash.runner] Starting Logstash {"logstash.version"=>"6.3.0"}
[2018-07-09T12:11:21,588][INFO][logstash.pipeline] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>1, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50}
[2018-07-09T12:11:22,148][INFO][logstash.pipeline] Pipeline started successfully {:pipeline_id=>"main", :thread=>"#<Thread:0x112db412 run>"}
[2018-07-09T12:11:22,287][INFO][logstash.agent] Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>[]}
[2018-07-09T12:11:22,946][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=>9600}
[2018-07-09T12:11:23,311][ERROR][logstash.pipeline] A plugin had an unrecoverable error. Will restart this plugin.
  Pipeline_id:main
  Plugin: <LogStash::Inputs::Elasticsearch hosts=>["xxx"], index=>"xxx", scroll=>"1m", query=>"{\"query\": {\"match_all\":{}},\"sort\": [\"xxx\"]}", id=>"fecdd943a2e091f4f31552dc9ad7facf609d1134aa80144bfb872551c455a193", enable_metric=>true, codec=><LogStash::Codecs::JSON id=>"json_2e7bb0a1-898b-4f9d-9a2c-31cde42037cf", enable_metric=>true, charset=>"UTF-8">, size=>1000, docinfo=>false, docinfo_target=>"@metadata", docinfo_fields=>["_index", "_type", "_id"], ssl=>false>
  Error: [411] 
<html><head>
<meta type="copyright" content="Copyright (C) 1996-2016 The Squid Software Foundation and contributors">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>ERREUR : l'URL demandée n'a pas pu être chargée</title>
<style type="text/css"><!-- 
 ...

```

I've found this similar github issue:

> <https://github.com/logstash-plugins/logstash-input-elasticsearch/issues/67>

But no one replied.

Does anyone know how we can solve this issue?

Thanks in advance

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 7, 2018, 2:03pm UTC](https://discuss.elastic.co/t/error-logstash-elasticsearch/139363/2 "2018-08-07T14:03:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.