# Failed to publish events: temporary bulk send failure

**URL:** <https://discuss.elastic.co/t/failed-to-publish-events-temporary-bulk-send-failure/315545>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [September 30, 2022, 10:41am UTC](https://discuss.elastic.co/t/failed-to-publish-events-temporary-bulk-send-failure/315545 "2022-09-30T10:41:53Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kay\_Khan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kay_khan/32/45028_2.png) [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\
**Post date:** [September 30, 2022, 10:41am UTC](https://discuss.elastic.co/t/failed-to-publish-events-temporary-bulk-send-failure/315545/1 "2022-09-30T10:41:53Z")

</div>

We are receiving this error for a filbeat pod in a node on our kuberntes cluster. This specific filebeat pod seems to always be using a high amount of cpu. We wonder if this error message and the high cpu usage is linked?

```auto
failed to publish events: temporary bulk send failure

```

logs:

> {"log.level":"error","@timestamp":"2022-09-30T09:01:36.252Z","log.logger":"publisher\_pipeline\_output","log.origin":{"file.name":"pipeline/client\_worker.go","file.line":176},"message":"failed to publish events: temporary bulk send failure","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:36.252Z","log.logger":"publisher\_pipeline\_output","log.origin":{"file.name":"pipeline/client\_worker.go","file.line":139},"message":"Connecting to backoff(elasticsearch([https://elasticsearch-prod-es-http.elastic-system.svc:9200](https://elasticsearch-prod-es-http.elastic-system.svc:9200)))","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:36.253Z","log.logger":"esclientleg","log.origin":{"file.name":"eslegclient/connection.go","file.line":287},"message":"Attempting to connect to Elasticsearch version 8.2.2","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:36.255Z","log.logger":"index-management","log.origin":{"file.name":"idxmgmt/std.go","file.line":231},"message":"Auto ILM enable success.","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:36.261Z","log.logger":"index-management.ilm","log.origin":{"file.name":"ilm/std.go","file.line":118},"message":"ILM policy filebeat exists already.","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:36.261Z","log.logger":"index-management","log.origin":{"file.name":"idxmgmt/std.go","file.line":366},"message":"Set settings.index.lifecycle.name in template to {filebeat {"policy":{"phases":{"hot":{"actions":{"rollover":{"max\_age":"30d","max\_size":"50gb"}}}}}}} as ILM is enabled.","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:36.273Z","log.logger":"template\_loader","log.origin":{"file.name":"template/load.go","file.line":114},"message":"Template "filebeat-8.2.2" already exists and will not be overwritten.","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:36.273Z","log.logger":"index-management","log.origin":{"file.name":"idxmgmt/std.go","file.line":267},"message":"Loaded index template.","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:36.274Z","log.logger":"publisher\_pipeline\_output","log.origin":{"file.name":"pipeline/client\_worker.go","file.line":147},"message":"Connection to backoff(elasticsearch([https://elasticsearch-prod-es-http.elastic-system.svc:9200](https://elasticsearch-prod-es-http.elastic-system.svc:9200))) established","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"error","@timestamp":"2022-09-30T09:01:37.401Z","log.logger":"publisher\_pipeline\_output","log.origin":{"file.name":"pipeline/client\_worker.go","file.line":176},"message":"failed to publish events: temporary bulk send failure","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:37.401Z","log.logger":"publisher\_pipeline\_output","log.origin":{"file.name":"pipeline/client\_worker.go","file.line":139},"message":"Connecting to backoff(elasticsearch([https://elasticsearch-prod-es-http.elastic-system.svc:9200](https://elasticsearch-prod-es-http.elastic-system.svc:9200)))","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:37.405Z","log.logger":"esclientleg","log.origin":{"file.name":"eslegclient/connection.go","file.line":287},"message":"Attempting to connect to Elasticsearch version 8.2.2","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:37.409Z","log.logger":"index-management","log.origin":{"file.name":"idxmgmt/std.go","file.line":231},"message":"Auto ILM enable success.","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:37.413Z","log.logger":"index-management.ilm","log.origin":{"file.name":"ilm/std.go","file.line":118},"message":"ILM policy filebeat exists already.","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:37.413Z","log.logger":"index-management","log.origin":{"file.name":"idxmgmt/std.go","file.line":366},"message":"Set settings.index.lifecycle.name in template to {filebeat {"policy":{"phases":{"hot":{"actions":{"rollover":{"max\_age":"30d","max\_size":"50gb"}}}}}}} as ILM is enabled.","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:37.426Z","log.logger":"template\_loader","log.origin":{"file.name":"template/load.go","file.line":114},"message":"Template "filebeat-8.2.2" already exists and will not be overwritten.","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:37.426Z","log.logger":"index-management","log.origin":{"file.name":"idxmgmt/std.go","file.line":267},"message":"Loaded index template.","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:37.427Z","log.logger":"publisher\_pipeline\_output","log.origin":{"file.name":"pipeline/client\_worker.go","file.line":147},"message":"Connection to backoff(elasticsearch([https://elasticsearch-prod-es-http.elastic-system.svc:9200](https://elasticsearch-prod-es-http.elastic-system.svc:9200))) established","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"info","@timestamp":"2022-09-30T09:01:38.118Z","log.origin":{"file.name":"input/input.go","file.line":134},"message":"input ticker stopped","service.name":"filebeat","ecs.version":"1.6.0"}  
> {"log.level":"error","@timestamp":"2022-09-30T09:01:38.550Z","log.logger":"publisher\_pipeline\_output","log.origin":{"file.name":"pipeline/client\_worker.go","file.line":176},"message":"failed to publish events: temporary bulk send failure","service.name":"filebeat","ecs.version":"1.6.0"}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 28, 2022, 12:42pm UTC](https://discuss.elastic.co/t/failed-to-publish-events-temporary-bulk-send-failure/315545/2 "2022-10-28T12:42:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.