# Getiing this error 403 forbidden erro in "logstash-plain.log

**URL:** <https://discuss.elastic.co/t/getiing-this-error-403-forbidden-erro-in-logstash-plain-log/241796>\
**Category:** Logstash\
**Created:** [July 19, 2020, 1:45pm UTC](https://discuss.elastic.co/t/getiing-this-error-403-forbidden-erro-in-logstash-plain-log/241796 "2020-07-19T13:45:06Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![rama543](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rama543/32/73933_2.png) [@rama543](https://discuss.elastic.co/u/rama543)\
**Post date:** [July 19, 2020, 1:45pm UTC](https://discuss.elastic.co/t/getiing-this-error-403-forbidden-erro-in-logstash-plain-log/241796/1 "2020-07-19T13:45:06Z")

</div>

Getting below Error message in logstash-plain. log  
I am using AWS managed ElasticSearch ,Kibana . Logstash i have installed in amazon ec2 instance .  
Please help to get resolve the issue

Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"[https://xxxxx:xxxxxx@search-rxxxxxxxxxxxxxxxxx.us-east-1.es.amazonaws.com:443/](https://xxxxx:xxxxxx@search-rxxxxxxxxxxxxxxxxx.us-east-1.es.amazonaws.com:443/)", :error\_type=\>LogStash::Outputs::AmazonElasticSearch::HttpClient::Pool::BadResponseCodeError, :error=\>"Got response code '403' contacting Elasticsearch at URL '[https://search-xxxxxxxxxxxxxxxxxxxxxtt6n4.us-east-1.es.amazonaws.com:443/](https://search-xxxxxxxxxxxxxxxxxxxxxtt6n4.us-east-1.es.amazonaws.com:443/)'"}

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [July 19, 2020, 6:04pm UTC](https://discuss.elastic.co/t/getiing-this-error-403-forbidden-erro-in-logstash-plain-log/241796/2 "2020-07-19T18:04:09Z")

</div>

A 403 error suggests that the user you are connecting with does not have the roles granted to it to allow it to perform that actions it is trying to do.

You might get a better answer in the elasticsearch forum.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 16, 2020, 6:04pm UTC](https://discuss.elastic.co/t/getiing-this-error-403-forbidden-erro-in-logstash-plain-log/241796/3 "2020-08-16T18:04:10Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.