# Log stash not connecting to Elasticsearch

**URL:** <https://discuss.elastic.co/t/log-stash-not-connecting-to-elasticsearch/307263>\
**Category:** Logstash\
**Created:** [June 15, 2022, 11:49am UTC](https://discuss.elastic.co/t/log-stash-not-connecting-to-elasticsearch/307263 "2022-06-15T11:49:38Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![harijld](https://avatars.discourse-cdn.com/v4/letter/h/9fc348/32.png) [@harijld](https://discuss.elastic.co/u/harijld)\
**Post date:** [June 15, 2022, 11:49am UTC](https://discuss.elastic.co/t/log-stash-not-connecting-to-elasticsearch/307263/1 "2022-06-15T11:49:38Z")

</div>

Hi Team,  
my log stash is unable to connect Elastic search. Telnet is working fine but log stash pipeline is not able to create connection with Elasticsearch.

```auto
input {
    stdin{}
}

output {
elasticsearch {
hosts => ["10.128.0.3:9200"]
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
}
}

```

Error message -

> javapipeline - Pipeline error {:pipeline\_id=\>"main", :exception=\>#\<LogStash::ConfigurationError: Could not connect to a compatible version of Elasticsearch\>, :backtrace=\>["/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http\_client/pool.rb:245:in `block in healthcheck!'", "org/jruby/RubyHash.java:1415:in `each'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http\_client/pool.rb:238:in `healthcheck!'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:370:in `update\_urls'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http\_client/pool.rb:87:in `update_initial_urls'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:81:in `start'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http\_client.rb:358:in `build_pool'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client.rb:63:in `initialize'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http\_client\_builder.rb:106:in `create_http_client'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client_builder.rb:102:in `build'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/plugin\_mixins/elasticsearch/common.rb:34:in `build_client'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch.rb:279:in `register'", "org/logstash/config/ir/compiler/OutputStrategyExt.java:131:in `register'", "org/logstash/config/ir/compiler/AbstractOutputDelegatorExt.java:68:in `register'", "/usr/share/logstash/logstash-core/lib/logstash/java\_pipeline.rb:233:in `block in register_plugins'", "org/jruby/RubyArray.java:1821:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/java\_pipeline.rb:232:in `register_plugins'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:598:in `maybe\_setup\_out\_plugins'", "/usr/share/logstash/logstash-core/lib/logstash/java\_pipeline.rb:245:in `start_workers'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:190:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/java\_pipeline.rb:142:in `block in start'"], "pipeline.sources"=\>["/etc/logstash/conf.d/beats.conf"], :thread=\>"#\<Thread:0x6ed41164 run\>"}

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [June 15, 2022, 12:04pm UTC](https://discuss.elastic.co/t/log-stash-not-connecting-to-elasticsearch/307263/2 "2022-06-15T12:04:29Z")

</div>

> [@harijld](#):
>
> LogStash::ConfigurationError: Could not connect to a compatible version of Elasticsearch

Which Elasticsearch are you using? This normally happens when you are using the AWS Elasticsearch distribution with a newer Logstash version.

Also, what are the version of your Elasticsearch and Logstash?

---

<div class="post-metadata">

**Author:** ![harijld](https://avatars.discourse-cdn.com/v4/letter/h/9fc348/32.png) [@harijld](https://discuss.elastic.co/u/harijld)\
**Post date:** [June 15, 2022, 12:10pm UTC](https://discuss.elastic.co/t/log-stash-not-connecting-to-elasticsearch/307263/3 "2022-06-15T12:10:28Z")

</div>

HI Leandrojmp , Thanks for your response.

Elasticsearch - 7.10.2

Logstash - 7.17.4

```auto
[root@master-red hariuser]# curl -X GET http://localhost:9200
{
  "name" : "master",
  "cluster_name" : "my-application",
  "cluster_uuid" : "samV8dK-ReWWZhESBwXmLQ",
  "version" : {
    "number" : "7.10.2",
    "build_flavor" : "oss",
    "build_type" : "rpm",
    "build_hash" : "747e1cc71def077253878a59143c1f785afa92b9",
    "build_date" : "2021-01-13T00:42:12.435326Z",
    "build_snapshot" : false,
    "lucene_version" : "8.7.0",
    "minimum_wire_compatibility_version" : "6.8.0",
    "minimum_index_compatibility_version" : "6.0.0-beta1"
  },
  "tagline" : "You Know, for Search"

```

log stash -

```auto
 runner - Starting Logstash {"logstash.version"=>"7.17.4", "jruby.version"=>"jruby 9.2.20.1 (2.5.8) 2021-11-30 2a2962fbd1 OpenJDK 64-Bit Server VM 11.0.14.1+1 on 11.0.14.1+1 +indy +jit [linux-x86_64]"}

```

How can i check whether it is AWS Elasticsearch distribution with a newer Logstash version or not ?

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [June 15, 2022, 12:16pm UTC](https://discuss.elastic.co/t/log-stash-not-connecting-to-elasticsearch/307263/4 "2022-06-15T12:16:57Z")

</div>

> [@harijld](#):
>
> ```auto
> "number" : "7.10.2",
> "build_flavor" : "oss"
> 
> ```

This is the issue, you are running the open source version, you need to use Logstash in the same version, `7.10.2`.

Newer versions of Logstash will check if you are using an Elasticsearch distributed by Elastic, using the basic free license or one of the paid tiers, the OSS version does not have the `_license` endpoint, so Logstash will not work.

Change your Logstash to `7.10.2` and it should work.

---

<div class="post-metadata">

**Author:** ![harijld](https://avatars.discourse-cdn.com/v4/letter/h/9fc348/32.png) [@harijld](https://discuss.elastic.co/u/harijld)\
**Post date:** [June 16, 2022, 7:01am UTC](https://discuss.elastic.co/t/log-stash-not-connecting-to-elasticsearch/307263/5 "2022-06-16T07:01:36Z")

</div>

HI Leandrojmp , Now it is resolved. Thanks for your quick response.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 14, 2022, 7:02am UTC](https://discuss.elastic.co/t/log-stash-not-connecting-to-elasticsearch/307263/6 "2022-07-14T07:02:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
