Logstash_7.5.2_ Encountered a retryable error. Will Retry with exponential backoff {:code=>400, :url=>"https://host:9200/_bulk"}

[anburethy]

Hi Team,

We use an ELK stack and I actually ran into login issue for which I deleted some existing indexes which are old and the login issue sorted but I ran into another issue. I wasnt able to reindex not the new indexes arent getting created. When I tried to dig into it I came across the below error which keeps popping up 4 times every minute under /var/log/logstash.

Though I found some of the suggestions on this error already, but I wasnt able to sove it.

Appreciate suggestions.

[ERROR][logstash.outputs.elasticsearch][main] Encountered a retryable error. Will Retry with exponential backoff {:code=>400, :url=>"https://host:9200/_bulk"}

Please note : I am facing this in only one of the environment and not on others. SO the version of ELK is fine in other Env's which are working.

Regards,
Anbu.

[rugenl (Len Rugen)]

The "host" in "https://host:9200" looks like the DNS or IP of your elastic server isn't in the logstash configuration. That should be in the output section of your logstash or pipeline config files.

[anburethy]

Thanks @rugenl , I checked the config of logstash & the host is present. Also the point to note is that this isnt a fresh set up , it was working for quite sometime and suddenly throwing this error. No config or version changes done. All I can see is there is a communication issue between logstash & ElasticSearch services

Regards,
Anbu.