Http_request_failure

Hi,
I need some support regarding http_request_failure when ssl is configured.
I have a URL to be used as input of logstash and I have 3 Elastic Nodes , 2 Logstash node and 1 Kibana Node and ssl is configured on all nodes.

I'm getting below error after running conf file
{
"tags" => [
[0] "_http_request_failure",
[1] "_split_type_failure"
],
"@version" => "1",
"@timestamp" => 2020-05-26T07:16:10.515Z,
"http_request_failure" => {
"name" => "url",
"backtrace" => nil,
"request" => {
"method" => "get",
"url" => url => "https://abc.com/api/now/table/incident?sysparm_query=true^ORDERBYDESCnumber^&sysparm_display_value=true&sysparm_exclude_reference_link=true&sysparm_limit=1000"
},
"error" => "connect timed out",
"runtime_seconds" => 10.140782
}
}

my conf file
input {
http_poller {
urls => {
url => "https://abc.com/api/now/table/incident?sysparm_query=true^ORDERBYDESCnumber^&sysparm_display_value=true&sysparm_exclude_reference_link=true&sysparm_limit=1000""
}
request_timeout => 10
schedule => { cron => "* * * * * UTC"}
codec => "json"
#metadata_target => "http_poller_metadata"
user => "user_name"
password => "******"
}
}
filter {
split { field => "result" }

if [result][priority] == "" {
mutate {
replace => { "[result][priority]" => "N/A" }
}
}
mutate {
convert => { "[result][opened_at]" => "string" }
}
date {
match => ["[result][opened_at]", "yyyy-MM-dd HH:mm:ss"]
target => "@timestamp"
}

fingerprint {
source => "result"
target => "[@metadata][fingerprint]"
method => "MURMUR3"
}
}
output {
stdout {
codec => rubydebug
}
elasticsearch {
hosts => "http://1.2.1.3:9200"
user => "user_name"
password => "******"
ssl => true
ssl_certificate_verification => true
document_id => "%{[@metadata][fingerprint]}"
index => "index"
}
}

You are getting the error "connect timed out" when attempting to connect to this host. Could a firewall be blocking the request?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.