# Issue logstashing to Found - Continued discussion **URL:** \ **Category:** Logstash\ **Created:** [October 21, 2015, 12:14am UTC](https://discuss.elastic.co/t/issue-logstashing-to-found-continued-discussion/32627 "2015-10-21T00:14:37Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![cstrzadala](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cstrzadala/32/8211_2.png) [@cstrzadala](https://discuss.elastic.co/u/cstrzadala)\ **Post date:** [October 21, 2015, 12:14am UTC](https://discuss.elastic.co/t/issue-logstashing-to-found-continued-discussion/32627/1 "2015-10-21T00:14:37Z")
Continuing the discussion from [Issue logstashing to Found](https://discuss.elastic.co/t/issue-logstashing-to-found/32581): > [@On another topic](https://discuss.elastic.co/t/32581/1): > > Got error logstashing (Logstash 1.5.4) to Elastic Search on Found. > > The following was thrown out in the debug logs and I am at a lost as to what is happening. I tried to adjust the flush sizes, idle\_flush time and also the java heap size. But it did not help > > It was working until a reboot, but the connectivity to Elasticsearch/Found is still valid and a curl test informed that there is no connectivity issue with the network. Any suggestions? > > Failed to flush outgoing items {:outgoing\_count=\>20, :exception=\>"Manticore::ClientProtocolException", :backtrace=\>["/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.4.4-java/lib/manticore/response.rb:35:in `initialize'", "org/jruby/RubyProc.java:271:in `call'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.4.4-java/lib/manticore/response.rb:70:in `call'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.4.4-java/lib/manticore/response.rb:245:in `call\_once'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.4.4-java/lib/manticore/response.rb:148:in `code'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.12/lib/elasticsearch/transport/transport/http/manticore.rb:71:in `perform\_request'", "org/jruby/RubyProc.java:271:in `call'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.12/lib/elasticsearch/transport/transport/base.rb:190:in `perform\_request'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.12/lib/elasticsearch/transport/transport/http/manticore.rb:54:in `perform_request'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-transport-1.0.12/lib/elasticsearch/transport/client.rb:119:in `perform\_request'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/elasticsearch-api-1.0.12/lib/elasticsearch/api/actions/bulk.rb:80:in `bulk'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-1.0.7-java/lib/logstash/outputs/elasticsearch/protocol.rb:104:in `bulk'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-1.0.7-java/lib/logstash/outputs/elasticsearch.rb:542:in `submit'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-1.0.7-java/lib/logstash/outputs/elasticsearch.rb:566:in `flush'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/stud-0.0.21/lib/stud/buffer.rb:219:in `buffer_flush'", "org/jruby/RubyHash.java:1341:in `each'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/stud-0.0.21/lib/stud/buffer.rb:216:in `buffer_flush'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/stud-0.0.21/lib/stud/buffer.rb:159:in `buffer\_receive'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-1.0.7-java/lib/logstash/outputs/elasticsearch.rb:531:in `receive'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/outputs/base.rb:88:in `handle'", "(eval):73:in `output_func'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/pipeline.rb:244:in `outputworker'", "/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/pipeline.rb:166:in `start\_outputs'"], :level=\>:warn, :file=\>"stud/buffer.rb", :line=\>"231", :method=\>"buffer\_flush"} > > elasticsearch { > cluster =\> "45cd54" > host =\> "[xxx.us-east-1.aws.found.io](http://xxx.us-east-1.aws.found.io)" > port =\> "9243" > ssl =\> "true" > ssl\_certificate\_verification =\> "true" > protocol =\> "http" > user =\> "user" > flush\_size =\> "20" > idle\_flush\_time =\> "5" > password =\> "password" > } ---
**Author:** ![James\_Tang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/james_tang/32/8112_2.png) [@James\_Tang](https://discuss.elastic.co/u/James_Tang)\ **Post date:** [October 21, 2015, 1:50am UTC](https://discuss.elastic.co/t/issue-logstashing-to-found-continued-discussion/32627/2 "2015-10-21T01:50:42Z")
Applying an approach from Sherlock Holmes, rule out the possibilities. So if anyone can help with the below questions? 1. Can logstash and ES on Found be able to handle ipv6 transport? ie receiving logs logstashing into Found? [https://forums.aws.amazon.com/thread.jspa?messageID=536049.](https://forums.aws.amazon.com/thread.jspa?messageID=536049.) No definitive answers based on the fourm. Last update was recent enough. 2. How can we rule out that it is an network issue locally? Will using curl be sufficient? Any recommendations as to what kind of test can we performed to rule them out? Especially when the host has both IPV4 and 6 addresses. Additional information: - Switching the configuration to ssl=\> false is not working. The same exception is happening. Failed to flush outgoing items {:outgoing\_count=\>1, :exception=\>"Manticore::ClientProtocolException", :backtrace=\>["/volume1/apps/logstash/vendor/bundle/jruby/1.9/gems/manticore-0.4.4-java/lib/manticore/response.rb:35:in `initialize'", . . . . regards ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 5:25am UTC](https://discuss.elastic.co/t/issue-logstashing-to-found-continued-discussion/32627/3 "2017-07-06T05:25:59Z")