# Logstash 429 errors

**URL:** <https://discuss.elastic.co/t/logstash-429-errors/44387>\
**Category:** Logstash\
**Created:** [March 15, 2016, 2:25am UTC](https://discuss.elastic.co/t/logstash-429-errors/44387 "2016-03-15T02:25:01Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Augustin\_Chen](https://avatars.discourse-cdn.com/v4/letter/a/b5ac83/32.png) [@Augustin\_Chen](https://discuss.elastic.co/u/Augustin_Chen)\
**Post date:** [March 15, 2016, 2:25am UTC](https://discuss.elastic.co/t/logstash-429-errors/44387/1 "2016-03-15T02:25:01Z")

</div>

I have logstash 2.2.2 installed in my server. I see following 429 warnings in the logstashlogs. what do these logs mean? Does it mean the retry succeeds, or the event is going to be retried?  
Also are there any tips to walk around the 429(too many requests) response?

{:timestamp=\>"2016-03-14T21:48:06.924000-0400", :message=\>"Got a 429 response: {"retry\_after":1,"ok":false,"error":"rate\_limited"}", :level=\>:warn}  
{:timestamp=\>"2016-03-14T21:48:19.647000-0400", :message=\>"Got a 429 response: {"retry\_after":1,"ok":false,"error":"rate\_limited"}", :level=\>:warn}  
{:timestamp=\>"2016-03-14T21:50:16.987000-0400", :message=\>"Got a 429 response: {"retry\_after":1,"ok":false,"error":"rate\_limited"}", :level=\>:warn}  
{:timestamp=\>"2016-03-14T21:52:09.596000-0400", :message=\>"Got a 429 response: {"retry\_after":1,"ok":false,"error":"rate\_limited"}", :level=\>:warn}  
{:timestamp=\>"2016-03-14T21:53:54.587000-0400", :message=\>"Got a 429 response: {"retry\_after":1,"ok":false,"error":"rate\_limited"}", :level=\>:warn}  
{:timestamp=\>"2016-03-14T22:00:09.295000-0400", :message=\>"Got a 429 response: {"retry\_after":1,"ok":false,"error":"rate\_limited"}", :level=\>:warn}  
{:timestamp=\>"2016-03-14T22:00:24.223000-0400", :message=\>"Got a 429 response: {"retry\_after":1,"ok":false,"error":"rate\_limited"}", :level=\>:warn}  
{:timestamp=\>"2016-03-14T22:02:59.302000-0400", :message=\>"Got a 429 response: {"retry\_after":1,"ok":false,"error":"rate\_limited"}", :level=\>:warn}  
{:timestamp=\>"2016-03-14T22:03:22.004000-0400", :message=\>"Got a 429 response: {"retry\_after":1,"ok":false,"error":"rate\_limited"}", :level=\>:warn}  
{:timestamp=\>"2016-03-14T22:15:01.979000-0400", :message=\>"Got a 429 response: {"retry\_after":1,"ok":false,"error":"rate\_limited"}", :level=\>:warn}

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [March 15, 2016, 2:26am UTC](https://discuss.elastic.co/t/logstash-429-errors/44387/2 "2016-03-15T02:26:32Z")

</div>

429 means your ES cluster cannot keep up, so you should look at what is happening there using something like Marvel.

---

<div class="post-metadata">

**Author:** ![Augustin\_Chen](https://avatars.discourse-cdn.com/v4/letter/a/b5ac83/32.png) [@Augustin\_Chen](https://discuss.elastic.co/u/Augustin_Chen)\
**Post date:** [March 15, 2016, 7:39am UTC](https://discuss.elastic.co/t/logstash-429-errors/44387/3 "2016-03-15T07:39:08Z")

</div>

What does the logs mean? The event is retried or is going to be retired?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [March 15, 2016, 8:08pm UTC](https://discuss.elastic.co/t/logstash-429-errors/44387/4 "2016-03-15T20:08:07Z")

</div>

[https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#\_retry\_policy](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#_retry_policy)

If you are on the latest, it'll retry infinitely.

---

<div class="post-metadata">

**Author:** ![Augustin\_Chen](https://avatars.discourse-cdn.com/v4/letter/a/b5ac83/32.png) [@Augustin\_Chen](https://discuss.elastic.co/u/Augustin_Chen)\
**Post date:** [March 16, 2016, 1:51am UTC](https://discuss.elastic.co/t/logstash-429-errors/44387/5 "2016-03-16T01:51:20Z")

</div>

Thank you for your answer.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:06am UTC](https://discuss.elastic.co/t/logstash-429-errors/44387/6 "2017-07-06T05:06:50Z")

</div>


