# Got error to send bulk of actions: Connection refused **URL:** \ **Category:** Logstash\ **Created:** [February 15, 2016, 4:46pm UTC](https://discuss.elastic.co/t/got-error-to-send-bulk-of-actions-connection-refused/41809 "2016-02-15T16:46:55Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![NiteshBarnwal](https://avatars.discourse-cdn.com/v4/letter/n/e495f1/32.png) [@NiteshBarnwal](https://discuss.elastic.co/u/NiteshBarnwal)\ **Post date:** [February 15, 2016, 4:46pm UTC](https://discuss.elastic.co/t/got-error-to-send-bulk-of-actions-connection-refused/41809/1 "2016-02-15T16:46:55Z")
I am using logstash 1.5.4 . getting error like below since today. Got error to send bulk of actions: Connection refused {:level=\>:error} > Failed to flush outgoing items {:outgoing\_count=\>193, :exception=\>"Manticore::SocketException", :backtrace=\>["/installdir/ELK/logstash-1.5.4/vendor/bundle/s/manticore-0.4.4-java/lib/manticore/response.rb:35:in `initialize'", "org/jruby/RubyProc.java:271:in `call'", "/installdir/ELK/logstash-1.5.4/vendor/bundlems/manticore-0.4.4-java/lib/manticore/response.rb:70:in `call'", "/installdir/ELK/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/manticore-0.4.4-java/lib/manse.rb:245:in `call\_once'", "/installdir/ELK/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/manticore-0.4.4-java/lib/manticore/response.rb:148:in `code'", "/inlogstash-1.5.4/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.12/lib/elasticsearch/transport/transport/http/manticore.rb:71:in `perform\_request'"RubyProc.java:271:in `call'", "/installdir/ELK/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.12/lib/elasticsearch/transport/trans190:in `perform\_request'", "/installdir/ELK/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.12/lib/elasticsearch/transport/transporore.rb:54:in `perform_request'", "/installdir/ELK/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.12/lib/elasticsearch/transport/cln `perform\_request'", "/installdir/ELK/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/elasticsearch-api-1.0.12/lib/elasticsearch/api/actions/bulk.rb:80:in `bulldir/ELK/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-1.0.7-java/lib/logstash/outputs/elasticsearch/protocol.rb:104:in `bulk'ir/ELK/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-1.0.7-java/lib/logstash/outputs/elasticsearch.rb:542:in `submit'", "/instastash-1.5.4/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-1.0.7-java/lib/logstash/outputs/elasticsearch.rb:566:in `flush'", "/installdir/ELK/l/vendor/bundle/jruby/1.9/gems/stud-0.0.21/lib/stud/buffer.rb:219:in `buffer_flush'", "org/jruby/RubyHash.java:1341:in `each'", "/installdir/ELK/logstash-1.ndle/jruby/1.9/gems/stud-0.0.21/lib/stud/buffer.rb:216:in `buffer_flush'", "/installdir/ELK/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/stud-0.0.21/lib/stu93:in `buffer\_flush'", "/installdir/ELK/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/stud-0.0.21/lib/stud/buffer.rb:159:in `buffer_receive'", "/installdir/E.5.4/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-1.0.7-java/lib/logstash/outputs/elasticsearch.rb:531:in `receive'", "/installdir/ELK/logstaor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/outputs/base.rb:88:in `handle'", "(eval):609:in `output\_func'", "/installdir/ELK/logstash-1.ndle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/pipeline.rb:244:in `outputworker'", "/installdir/ELK/logstash-1.5.4/vendor/bundle/jruby/1.9/gems/-1.5.4-java/lib/logstash/pipeline.rb:166:in `start\_outputs'"], :level=\>:warn} ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [February 15, 2016, 6:05pm UTC](https://discuss.elastic.co/t/got-error-to-send-bulk-of-actions-connection-refused/41809/2 "2016-02-15T18:05:52Z")
Have you checked ES to make sure it is not overloaded? ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [February 15, 2016, 6:06pm UTC](https://discuss.elastic.co/t/got-error-to-send-bulk-of-actions-connection-refused/41809/3 "2016-02-15T18:06:31Z")
You have configured Logstash to connect to a host:port combination where nobody's listening. Are you using the right hostname? The right port? Is there a firewall blocking the connection attempts? Is Elasticsearch listening on the right interface? There are many questions to dig into. ---
**Author:** ![NiteshBarnwal](https://avatars.discourse-cdn.com/v4/letter/n/e495f1/32.png) [@NiteshBarnwal](https://discuss.elastic.co/u/NiteshBarnwal)\ **Post date:** [February 16, 2016, 5:35am UTC](https://discuss.elastic.co/t/got-error-to-send-bulk-of-actions-connection-refused/41809/4 "2016-02-16T05:35:34Z")
I am using lumberjack plugin. And yes firewall port is open. The same was working a day before. I can also see logs scrolling for few seconds and then the above errors keep repetative. Is there any way to check tge connectivity between ES and logstash? ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [February 16, 2016, 6:29am UTC](https://discuss.elastic.co/t/got-error-to-send-bulk-of-actions-connection-refused/41809/5 "2016-02-16T06:29:08Z")
> I am using lumberjack plugin. Sure, for the _input_ but that's not where your problem is. > Is there any way to check tge connectivity between ES and logstash? You could e.g. use curl or telnet; `curl hostname-of-es-server:9200`. ---
**Author:** ![NiteshBarnwal](https://avatars.discourse-cdn.com/v4/letter/n/e495f1/32.png) [@NiteshBarnwal](https://discuss.elastic.co/u/NiteshBarnwal)\ **Post date:** [February 17, 2016, 9:27am UTC](https://discuss.elastic.co/t/got-error-to-send-bulk-of-actions-connection-refused/41809/6 "2016-02-17T09:27:02Z")
I forgot to mention: I am running ELK on the same host. Recently I have upgraded to kibana-4.4.0 and ES-2.2.0 and i tried to upgrade logstash-2.2.0 but It was giving below error: `Connection refused {:class=>"Manticore::SocketException", :level=>:error}` So I sticked to logstash-1.5.4 ... but it is giving a stack of errors that i already mentioned in first post. Hope this can help to debug. ---
**Author:** ![NiteshBarnwal](https://avatars.discourse-cdn.com/v4/letter/n/e495f1/32.png) [@NiteshBarnwal](https://discuss.elastic.co/u/NiteshBarnwal)\ **Post date:** [February 17, 2016, 9:31am UTC](https://discuss.elastic.co/t/got-error-to-send-bulk-of-actions-connection-refused/41809/8 "2016-02-17T09:31:11Z")
> [@warkolm](#): > > Have you checked ES to make sure it is not overloaded? Hello Mark, How can we check this? I am having a single ES node ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [February 17, 2016, 12:52pm UTC](https://discuss.elastic.co/t/got-error-to-send-bulk-of-actions-connection-refused/41809/9 "2016-02-17T12:52:12Z")
If you are using Logstash 1.5.4 with Elasticsearch 2.x, make sure that you are using the HTTP protocol in the Elasticsearch output plugin, or upgrade to the latest Logstash version. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 5:11am UTC](https://discuss.elastic.co/t/got-error-to-send-bulk-of-actions-connection-refused/41809/10 "2017-07-06T05:11:02Z")