# Log haven't push to

**URL:** <https://discuss.elastic.co/t/log-havent-push-to/125853>\
**Category:** Logstash\
**Created:** [March 28, 2018, 4:41am UTC](https://discuss.elastic.co/t/log-havent-push-to/125853 "2018-03-28T04:41:16Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![shwesinhan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shwesinhan/32/78663_2.png) [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\
**Post date:** [March 28, 2018, 4:41am UTC](https://discuss.elastic.co/t/log-havent-push-to/125853/1 "2018-03-28T04:41:16Z")

</div>

hi there

i use tcp input \> grok filter \> amazon\_es output \> then see the logs at kibana  
it works for me but yesterday i change logstash config for some patterns  
then logstash can not push the logs to amazon\_es domain.

when i debug flag is on, i saw input received, filter received, and i don't see `output received` msg  
and i also saw these msg

`Pushing flush onto pipeline <Thread:0x4aa71feb sleep> in logstash`  
`PageIO recovery element index:4, readNextElement exception: Element seqNum 0 is expected to be 5..`

anyone help me out??

here is my output config setting

> amazon\_es {  
> hosts =\> ["[test-1.es.amazonaws.com](http://test-1.es.amazonaws.com)"]  
> region =\> "ap-southeast-1"   
> aws\_access\_key\_id =\> "aaa"  
> aws\_secret\_access\_key =\> "aaaa"  
> # this setting controls how many events will be buffered before sending a batch of events in bulk API (default =\> 500)  
> flush\_size =\> 50000   
> # the amount of time in seconds since last flush before a flush is forced (default =\> 1)  
> idle\_flush\_time =\> 10   
> # retry parameters  
> #max\_retries (number, default =\> 3)  
> #retry\_max\_items (number, default =\> 5000)  
> #retry\_max\_interval (number, default =\> 5)  
> index =\> "logstash-%{+YYYY.MM.dd}"  
> }

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 25, 2018, 4:41am UTC](https://discuss.elastic.co/t/log-havent-push-to/125853/2 "2018-04-25T04:41:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.