# Logstash always tries to connect to ES **URL:** \ **Category:** Logstash\ **Created:** [May 18, 2017, 3:58am UTC](https://discuss.elastic.co/t/logstash-always-tries-to-connect-to-es/86188 "2017-05-18T03:58:37Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![John\_06](https://avatars.discourse-cdn.com/v4/letter/j/7c8e57/32.png) [@John\_06](https://discuss.elastic.co/u/John_06)\ **Post date:** [May 18, 2017, 3:58am UTC](https://discuss.elastic.co/t/logstash-always-tries-to-connect-to-es/86188/1 "2017-05-18T03:58:37Z")
I am forwarding logs from Logstash to Kafka but Logstash always tries to connect to ES at `http://localhost:9200/` ``` [2017-05-18T03:45:49,875][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=>9600} [2017-05-18T03:45:50,383][INFO][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://logstash_system:xxxxxx@localhost:9200/, :path=>"/"} [2017-05-18T03:45:50,401][WARN][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>#, :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://logstash_system:xxxxxx@localhost:9200/][Manticore::SocketException] Connection refused (Connection refused)"} [2017-05-18T03:45:55,403][INFO][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://logstash_system:xxxxxx@localhost:9200/, :path=>"/"} [2017-05-18T03:45:55,425][WARN][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>#, :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://logstash_system:xxxxxx@localhost:9200/][Manticore::SocketException] Connection refused (Connection refused)"} [2017-05-18T03:45:55,543][WARN][logstash.outputs.elasticsearch] Marking url as dead. Last error: [LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError] Elasticsearch Unreachable: [http://logstash_system:xxxxxx@localhost:9200/_xpack/monitoring/?system_id=logstash&system_api_version=2&interval=1s][Manticore::SocketException] Connection refused (Connection refused) {:url=>http://logstash_system:xxxxxx@localhost:9200/_xpack/monitoring/?system_id=logstash&system_api_version=2&interval=1s, :error_message=>"Elasticsearch Unreachable: [http://logstash_system:xxxxxx@localhost:9200/_xpack/monitoring/?system_id=logstash&system_api_version=2&interval=1s][Manticore::SocketException] Connection refused (Connection refused)", :error_class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError"} [2017-05-18T03:45:55,546][ERROR][logstash.outputs.elasticsearch] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error_message=>"Elasticsearch Unreachable: [http://logstash_system:xxxxxx@localhost:9200/_xpack/monitoring/?system_id=logstash&system_api_version=2&interval=1s][Manticore::SocketException] Connection refused (Connection refused)", :class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError", :will_retry_in_seconds=>2} [2017-05-18T03:45:57,550][WARN][logstash.outputs.elasticsearch] UNEXPECTED POOL ERROR {:e=>#} [2017-05-18T03:45:57,556][ERROR][logstash.outputs.elasticsearch] Attempted to send a bulk request to elasticsearch, but no there are no living connections in the connection pool. Perhaps Elasticsearch is unreachable or down? {:error_message=>"No Available connections", :class=>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::NoConnectionAvailableError", :will_retry_in_seconds=>4} ``` This is logstash.conf ``` input { beats { port => 5044 } } output { kafka { ... } } ``` Why does Logstash try to connect to ES and how to fix it? ---
**Author:** ![Steve\_1](https://avatars.discourse-cdn.com/v4/letter/s/ebca7d/32.png) [@Steve\_1](https://discuss.elastic.co/u/Steve_1)\ **Post date:** [May 18, 2017, 5:22pm UTC](https://discuss.elastic.co/t/logstash-always-tries-to-connect-to-es/86188/2 "2017-05-18T17:22:20Z")
Is it a bug? ---
**Author:** ![guyboertje](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/guyboertje/32/31592_2.png) [@guyboertje](https://discuss.elastic.co/u/guyboertje)\ **Post date:** [May 18, 2017, 6:47pm UTC](https://discuss.elastic.co/t/logstash-always-tries-to-connect-to-es/86188/3 "2017-05-18T18:47:30Z")
If you are using x-pack then LS will try to send monitoring data to Elasticsearch. This is a feature. Without x-pack LS will use an inbuilt Webserver to allow for monitoring data querying. ---
**Author:** ![John\_06](https://avatars.discourse-cdn.com/v4/letter/j/7c8e57/32.png) [@John\_06](https://discuss.elastic.co/u/John_06)\ **Post date:** [May 18, 2017, 6:59pm UTC](https://discuss.elastic.co/t/logstash-always-tries-to-connect-to-es/86188/4 "2017-05-18T18:59:20Z")
Thanks. It looks like it's not possible to disable X-Pack for Logstash: ``` General Monitoring Settings xpack.monitoring.enabled Set to false to disable X-Pack monitoring. Configure in both elasticsearch.yml and kibana.yml ``` ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [May 22, 2017, 5:24am UTC](https://discuss.elastic.co/t/logstash-always-tries-to-connect-to-es/86188/5 "2017-05-22T05:24:10Z")
> It looks like it's not possible to disable X-Pack for Logstash: I'm confused. You just quoted the section in the documentation that tells you how to disable it. ---
**Author:** ![John\_06](https://avatars.discourse-cdn.com/v4/letter/j/7c8e57/32.png) [@John\_06](https://discuss.elastic.co/u/John_06)\ **Post date:** [May 22, 2017, 3:57pm UTC](https://discuss.elastic.co/t/logstash-always-tries-to-connect-to-es/86188/6 "2017-05-22T15:57:48Z")
I found that in Kibana documentation only. Works for Logstash as well. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 19, 2017, 3:58pm UTC](https://discuss.elastic.co/t/logstash-always-tries-to-connect-to-es/86188/7 "2017-06-19T15:58:24Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.