# Log4j2 syslog appender exception **URL:** \ **Category:** Elasticsearch\ **Created:** [April 27, 2017, 8:20am UTC](https://discuss.elastic.co/t/log4j2-syslog-appender-exception/83817 "2017-04-27T08:20:06Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Raid\_Rohana](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raid_rohana/32/24437_2.png) [@Raid\_Rohana](https://discuss.elastic.co/u/Raid_Rohana)\ **Post date:** [April 27, 2017, 8:20am UTC](https://discuss.elastic.co/t/log4j2-syslog-appender-exception/83817/1 "2017-04-27T08:20:06Z")
HI Tried configuring elasticsearch 5x with syslog.appender using properties format. appender.syslog.type = syslog [appender.syslog.name](http://appender.syslog.name) = syslog appender.syslog.format = RFC5424 appender.syslog.exceptionPattern = %throwable{full} appender.syslog.ignoreExceptions = false appender.syslog.host = appender.syslog.port = 514 appender.syslog.protocol = udp appender.syslog.appName = elasticSearch appender.syslog.facility = local2 appender.syslog.mdcId = mdc Throws an exception: rg.apache.logging.log4j.core.appender.AppenderLoggingException: Error flushing stream UDP:x.x.x.x:514 at org.apache.logging.log4j.core.appender.OutputStreamManager.flushDestination(OutputStreamManager.java:268) at org.apache.logging.log4j.core.appender.OutputStreamManager.write(OutputStreamManager.java:224) at org.apache.logging.log4j.core.appender.OutputStreamManager.write(OutputStreamManager.java:197) at org.apache.logging.log4j.core.appender.AbstractOutputStreamAppender.writeByteArrayToManager(AbstractOutputStreamAppender.java:185) at org.apache.logging.log4j.core.appender.SocketAppender.directEncodeEvent(SocketAppender.java:424) at org.apache.logging.log4j.core.appender.AbstractOutputStreamAppender.tryAppend(AbstractOutputStreamAppender.java:169) at org.apache.logging.log4j.core.appender.AbstractOutputStreamAppender.append(AbstractOutputStreamAppender.java:160) at org.apache.logging.log4j.core.config.AppenderControl.tryCallAppender(AppenderControl.java:156) at org.apache.logging.log4j.core.config.AppenderControl.callAppender0(AppenderControl.java:129) at org.apache.logging.log4j.core.config.AppenderControl.callAppenderPreventRecursion(AppenderControl.java:120) at org.apache.logging.log4j.core.config.AppenderControl.callAppender(AppenderControl.java:84) at org.apache.logging.log4j.core.config.LoggerConfig.callAppenders(LoggerConfig.java:447) at org.apache.logging.log4j.core.config.LoggerConfig.processLogEvent(LoggerConfig.java:432) at org.apache.logging.log4j.core.config.LoggerConfig.log(LoggerConfig.java:416) at org.apache.logging.log4j.core.config.LoggerConfig.logParent(LoggerConfig.java:438) at org.apache.logging.log4j.core.config.LoggerConfig.processLogEvent(LoggerConfig.java:433) at org.apache.logging.log4j.core.config.LoggerConfig.log(LoggerConfig.java:416) at org.apache.logging.log4j.core.config.LoggerConfig.log(LoggerConfig.java:402) at org.apache.logging.log4j.core.config.AwaitCompletionReliabilityStrategy.log(AwaitCompletionReliabilityStrategy.java:63) at org.apache.logging.log4j.core.Logger.logMessage(Logger.java:146) at org.apache.logging.log4j.spi.ExtendedLoggerWrapper.logMessage(ExtendedLoggerWrapper.java:217) at org.elasticsearch.common.logging.PrefixLogger.logMessage(PrefixLogger.java:67) at org.apache.logging.log4j.spi.AbstractLogger.logMessageSafely(AbstractLogger.java:2091) at org.apache.logging.log4j.spi.AbstractLogger.logMessage(AbstractLogger.java:1983) at org.apache.logging.log4j.spi.AbstractLogger.logIfEnabled(AbstractLogger.java:1845) at org.apache.logging.log4j.spi.AbstractLogger.debug(AbstractLogger.java:331) at org.elasticsearch.action.search.AbstractSearchAsyncAction.onFirstPhaseResult(AbstractSearchAsyncAction.java:186) at org.elasticsearch.action.search.AbstractSearchAsyncAction$1.onFailure(AbstractSearchAsyncAction.java:139) at org.elasticsearch.action.ActionListenerResponseHandler.handleException(ActionListenerResponseHandler.java:51) at org.elasticsearch.transport.TransportService$ContextRestoreResponseHandler.handleException(TransportService.java:984) at org.elasticsearch.transport.TcpTransport.lambda$handleException$17(TcpTransport.java:1314) at org.elasticsearch.common.util.concurrent.EsExecutors$1.execute(EsExecutors.java:109) at org.elasticsearch.transport.TcpTransport.handleException(TcpTransport.java:1312) at org.elasticsearch.transport.TcpTransport.handlerResponseError(TcpTransport.java:1304) at org.elasticsearch.transport.TcpTransport.messageReceived(TcpTransport.java:1248) at org.elasticsearch.transport.netty4.Netty4MessageChannelHandler.channelRead(Netty4MessageChannelHandler.java:74) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:373) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:359) at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:351) at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:293) at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:280) at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:396) at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:248) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:373) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:359) at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:351) at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1334) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:373) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:359) at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:926) at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:129) at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:651) at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:536) at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:490) at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:450) at io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:873) at java.lang.Thread.run(Thread.java:745) Caused by: java.io.IOException: Message too long (sendto failed) at java.net.PlainDatagramSocketImpl.send(Native Method) at java.net.DatagramSocket.send(DatagramSocket.java:693) at org.apache.logging.log4j.core.net.DatagramOutputStream.flush(DatagramOutputStream.java:103) ---
**Author:** ![Raid\_Rohana](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raid_rohana/32/24437_2.png) [@Raid\_Rohana](https://discuss.elastic.co/u/Raid_Rohana)\ **Post date:** [May 23, 2017, 8:49am UTC](https://discuss.elastic.co/t/log4j2-syslog-appender-exception/83817/2 "2017-05-23T08:49:12Z")
Moved to socket appender and GELF layouts Syslog in ES5 is not worth it ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 20, 2017, 8:49am UTC](https://discuss.elastic.co/t/log4j2-syslog-appender-exception/83817/3 "2017-06-20T08:49:23Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.