# Filebeat unable to send data to elastic search. ( Failed to publish events: Post + Client.Timeout exceeded while awaiting headers )

**URL:** https://discuss.elastic.co/t/filebeat-unable-to-send-data-to-elastic-search-failed-to-publish-events-post-client-timeout-exceeded-while-awaiting-headers/233171
**Category:** Beats
**Tags:** filebeat
**Created:** [May 18, 2020, 6:10pm UTC](https://discuss.elastic.co/t/filebeat-unable-to-send-data-to-elastic-search-failed-to-publish-events-post-client-timeout-exceeded-while-awaiting-headers/233171 "2020-05-18T18:10:54Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![ramakrushna.sahu](https://avatars.discourse-cdn.com/v4/letter/r/c77e96/32.png) [@ramakrushna.sahu](https://discuss.elastic.co/u/ramakrushna.sahu)
#### Post date: [May 18, 2020, 6:10pm UTC](https://discuss.elastic.co/t/filebeat-unable-to-send-data-to-elastic-search-failed-to-publish-events-post-client-timeout-exceeded-while-awaiting-headers/233171/1 "2020-05-18T18:10:55Z")

</div>

Filebeat unable to send data to elastic search and shows error as below.

May 18 23:37:03 filebeat\_host filebeat[18405]: 2020-05-18T23:37:03.595+0530 ERROR pipeline/output.go:121 Failed to publish events: Post https://es\_node1:9200/\_bulk: net/http: request canceled (Client.Timeout exceeded while awaiting headers)

# Similar error for the other two-node as well.

On Es side we are getting some error as below,  
[2020-05-18T18:13:47,864][INFO][o.e.x.i.IndexLifecycleRunner] [master.elasticsearch.node] policy [filebeat] for index [test\_dev-14] on an error step due to a transitive error, moving back to the failed step [check-rollover-ready] for execution. retry attempt [287]  
[2020-05-18T18:13:47,866][ERROR][o.e.x.i.IndexLifecycleRunner] [master.elasticsearch.node] policy [filebeat] for index [index\_Test2] failed on step [{"phase":"hot","action":"rollover","name":"check-rollover-ready"}]. Moving to ERROR step  
java.lang.IllegalArgumentException: index.lifecycle.rollover\_alias [ai\_secops\_filebeat\_broadcomit] does not point to index [ai\_secops\_filebeat\_broadcomit]  
at org.elasticsearch.xpack.core.ilm.WaitForRolloverReadyStep.evaluateCondition(WaitForRolloverReadyStep.java:104) [x-pack-core-7.6.2.jar:7.6.2]  
at org.elasticsearch.xpack.ilm.IndexLifecycleRunner.runPeriodicStep(IndexLifecycleRunner.java:152) [x-pack-ilm-7.6.2.jar:7.6.2]  
at org.elasticsearch.xpack.ilm.IndexLifecycleService.triggerPolicies(IndexLifecycleService.java:328) [x-pack-ilm-7.6.2.jar:7.6.2]  
at org.elasticsearch.xpack.ilm.IndexLifecycleService.triggered(IndexLifecycleService.java:266) [x-pack-ilm-7.6.2.jar:7.6.2]  
at org.elasticsearch.xpack.core.scheduler.SchedulerEngine.notifyListeners(SchedulerEngine.java:183) [x-pack-core-7.6.2.jar:7.6.2]  
at org.elasticsearch.xpack.core.scheduler.SchedulerEngine$ActiveSchedule.run(SchedulerEngine.java:211) [x-pack-core-7.6.2.jar:7.6.2]  
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) [?:?]  
at java.util.concurrent.FutureTask.run(FutureTask.java:264) [?:?]  
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:304) [?:?]  
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) [?:?]  
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) [?:?]  
at java.lang.Thread.run(Thread.java:830) [?:?]

---

<div class="post-metadata">

### Author: ![ramakrushna.sahu](https://avatars.discourse-cdn.com/v4/letter/r/c77e96/32.png) [@ramakrushna.sahu](https://discuss.elastic.co/u/ramakrushna.sahu)
#### Post date: [May 18, 2020, 6:35pm UTC](https://discuss.elastic.co/t/filebeat-unable-to-send-data-to-elastic-search-failed-to-publish-events-post-client-timeout-exceeded-while-awaiting-headers/233171/2 "2020-05-18T18:35:21Z")

</div>

The issue is resolved.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 15, 2020, 6:35pm UTC](https://discuss.elastic.co/t/filebeat-unable-to-send-data-to-elastic-search-failed-to-publish-events-post-client-timeout-exceeded-while-awaiting-headers/233171/3 "2020-06-15T18:35:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
