# Logstash connectively issue to elasticsearch **URL:** \ **Category:** Logstash\ **Created:** [April 30, 2020, 8:55am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501 "2020-04-30T08:55:43Z")\ **Posts on this page:** 16\ **Page:** 1
**Author:** ![hello4usharath](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hello4usharath/32/19175_2.png) [@hello4usharath](https://discuss.elastic.co/u/hello4usharath)\ **Post date:** [April 30, 2020, 8:55am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/1 "2020-04-30T08:55:43Z")
[2020-04-30T00:45:37,515][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"[http://es-stage-c1-vip.xxxxxx.com:9200/\_bulk](http://es-stage-c1-vip.xxxxxx.com:9200/_bulk)"} [2020-04-30T00:45:41,533][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"[http://es-stage-c1-vip.xxxxxx.com:9200/\_bulk](http://es-stage-c1-vip.xxxxxx.com:9200/_bulk)"} [2020-04-30T00:45:49,557][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"[http://es-stage-c1-vip.xxxxxx.com:9200/\_bulk](http://es-stage-c1-vip.xxxxxx.com:9200/_bulk)"} [2020-04-30T00:46:05,573][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"[http://es-stage-c1-vip.xxxxxx.com:9200/\_bulk](http://es-stage-c1-vip.xxxxxx.com:9200/_bulk)"} [2020-04-30T00:46:37,588][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"[http://es-stage-c1-vip.xxxxxx.com:9200/\_bulk](http://es-stage-c1-vip.xxxxxx.com:9200/_bulk)"} [2020-04-30T00:47:41,603][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"[http://es-stage-c1-vip.xxxxxx.com:9200/\_bulk](http://es-stage-c1-vip.xxxxxx.com:9200/_bulk)"} [2020-04-30T00:48:45,617][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"[http://es-stage-c1-vip.xxxxxx.com:9200/\_bulk](http://es-stage-c1-vip.xxxxxx.com:9200/_bulk)"} [2020-04-30T00:49:49,630][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"[http://es-stage-c1-vip.xxxxxx.com:9200/\_bulk](http://es-stage-c1-vip.xxxxxx.com:9200/_bulk)"} [2020-04-30T00:50:53,643][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"[http://es-stage-c1-vip.xxxxxx.com:9200/\_bulk](http://es-stage-c1-vip.xxxxxx.com:9200/_bulk)"} [2020-04-30T00:51:57,658][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"[http://es-stage-c1-vip.xxxxxx.com:9200/\_bulk](http://es-stage-c1-vip.xxxxxx.com:9200/_bulk)"} [2020-04-30T00:53:01,670][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"[http://es-stage-c1-vip.xxxxxx.com:9200/\_bulk](http://es-stage-c1-vip.xxxxxx.com:9200/_bulk)"} [2020-04-30T00:54:05,682][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"[http://es-stage-c1-vip.xxxxxx.com:9200/\_bulk](http://es-stage-c1-vip.xxxxxx.com:9200/_bulk)"} [2020-04-30T00:55:09,694][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. I killed the job and restarted after deleting the queue "to\_elasticsearch.queue" to work. Will Retry with exponential backoff {:code=\>400, :url=\>"[http://es-stage-c1-vip.xxxxxx.com:9200/\_bulk](http://es-stage-c1-vip.xxxxxx.com:9200/_bulk)"} [2020-04-30T00:56:13,707][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"[http://es-stage-c1-vip.xxxxxx.com:9200/\_bulk](http://es-stage-c1-vip.xxxxxx.com:9200/_bulk)"} [2020-04-30T00:57:17,720][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"[http://es-stage-c1-vip.xxxxxx.com:9200/\_bulk](http://es-stage-c1-vip.xxxxxx.com:9200/_bulk)"} ---
**Author:** ![Luca\_Belluccini](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/luca_belluccini/32/33239_2.png) [@Luca\_Belluccini](https://discuss.elastic.co/u/Luca_Belluccini)\ **Post date:** [April 30, 2020, 9:05am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/2 "2020-04-30T09:05:18Z")
Error 400 can be a mapping error. Please check the Logstash logs setting them to debug or the Elasticsearch logs and share them with us. ---
**Author:** ![hello4usharath](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hello4usharath/32/19175_2.png) [@hello4usharath](https://discuss.elastic.co/u/hello4usharath)\ **Post date:** [April 30, 2020, 9:34am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/3 "2020-04-30T09:34:40Z")
How to upload the logs ---
**Author:** ![Luca\_Belluccini](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/luca_belluccini/32/33239_2.png) [@Luca\_Belluccini](https://discuss.elastic.co/u/Luca_Belluccini)\ **Post date:** [April 30, 2020, 9:35am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/4 "2020-04-30T09:35:39Z")
Please use [https://pastebin.com/](https://pastebin.com/) or [https://gist.github.com/](https://gist.github.com/) ---
**Author:** ![hello4usharath](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hello4usharath/32/19175_2.png) [@hello4usharath](https://discuss.elastic.co/u/hello4usharath)\ **Post date:** [April 30, 2020, 9:36am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/5 "2020-04-30T09:36:16Z")
[![](https://us1.discourse-cdn.com/elastic/original/3X/b/c/bcec071d2daf94f074e0d45f573498975b42d6b0.png) CDF-search-stg-c1.log](https://drive.google.com/file/d/11DyxXFBCvs4B-W1z4msYtSXbjHNx3d92/view?usp=drive_web) [![](https://us1.discourse-cdn.com/elastic/original/3X/b/c/bcec071d2daf94f074e0d45f573498975b42d6b0.png) to\_elasticsearch.hrof](https://drive.google.com/file/d/1JKB92CXrk7DgxD5Pkh1mEaZ_q6GUA2eS/view?usp=drive_web) ---
**Author:** ![Luca\_Belluccini](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/luca_belluccini/32/33239_2.png) [@Luca\_Belluccini](https://discuss.elastic.co/u/Luca_Belluccini)\ **Post date:** [April 30, 2020, 9:43am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/6 "2020-04-30T09:43:56Z")
Can you make those files public? I do not want to share my private email. ---
**Author:** ![hello4usharath](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hello4usharath/32/19175_2.png) [@hello4usharath](https://discuss.elastic.co/u/hello4usharath)\ **Post date:** [April 30, 2020, 9:45am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/7 "2020-04-30T09:45:03Z")
> ![](https://us1.discourse-cdn.com/elastic/original/3X/9/1/91735153b24875cc69f81a688b7fa3c83b6590fd.png "Luca\_Belluccini") > [Luca\_Belluccini](https://discuss.elastic.co/u/luca_belluccini) > > ``` > Elastic Team Member > > April 30 > > ``` > > Error 400 can be a mapping error. > Please check the Logstash logs setting them to debug or the Elasticsearch logs and share them with us. > * * * > > [Visit Topic](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/2) or reply to this email to respond. > To unsubscribe from these emails, [click here](https://discuss.elastic.co/email/unsubscribe/97b0258b871ca19debc589e222b16c0306b52e1436af279c711459d0f34bf120). (Attachment logs.7z is missing) ---
**Author:** ![hello4usharath](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hello4usharath/32/19175_2.png) [@hello4usharath](https://discuss.elastic.co/u/hello4usharath)\ **Post date:** [April 30, 2020, 9:51am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/8 "2020-04-30T09:51:36Z")
[![](https://us1.discourse-cdn.com/elastic/original/3X/b/c/bcec071d2daf94f074e0d45f573498975b42d6b0.png) to\_elasticsearch.log1](https://drive.google.com/file/d/1j4CYE3773Hid1Xmf6IqBzjyPXO4XXiXj/view?usp=drive_web) logstash log ---
**Author:** ![Luca\_Belluccini](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/luca_belluccini/32/33239_2.png) [@Luca\_Belluccini](https://discuss.elastic.co/u/Luca_Belluccini)\ **Post date:** [April 30, 2020, 10:06am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/9 "2020-04-30T10:06:32Z")
@hello4usharath please make the drive docs you've shared public. The links you've shared require to be logged in on Google. ---
**Author:** ![hello4usharath](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hello4usharath/32/19175_2.png) [@hello4usharath](https://discuss.elastic.co/u/hello4usharath)\ **Post date:** [April 30, 2020, 10:12am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/10 "2020-04-30T10:12:49Z")
> **[to\_elasticsearch.hrof](https://drive.google.com/file/d/1JKB92CXrk7DgxD5Pkh1mEaZ_q6GUA2eS/view?usp=drive_open)** > > Google Drive file. > **[to\_elasticsearch.log1](https://drive.google.com/file/d/1j4CYE3773Hid1Xmf6IqBzjyPXO4XXiXj/view?usp=drive_open)** > > Google Drive file. > **[CDF-search-stg-c1.log](https://drive.google.com/file/d/11DyxXFBCvs4B-W1z4msYtSXbjHNx3d92/view?usp=drive_open)** > > Google Drive file. ---
**Author:** ![Luca\_Belluccini](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/luca_belluccini/32/33239_2.png) [@Luca\_Belluccini](https://discuss.elastic.co/u/Luca_Belluccini)\ **Post date:** [April 30, 2020, 10:26am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/11 "2020-04-30T10:26:00Z")
Hello @hello4usharath You seem to have a subscription with Elastic Support. Would you mind opening a ticket via the support portal as Severity 3 given the system is non-production? ---
**Author:** ![hello4usharath](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hello4usharath/32/19175_2.png) [@hello4usharath](https://discuss.elastic.co/u/hello4usharath)\ **Post date:** [April 30, 2020, 10:26am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/12 "2020-04-30T10:26:36Z")
Already openned a ticket ---
**Author:** ![hello4usharath](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hello4usharath/32/19175_2.png) [@hello4usharath](https://discuss.elastic.co/u/hello4usharath)\ **Post date:** [April 30, 2020, 10:28am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/13 "2020-04-30T10:28:24Z")
We need a urgent support , We have planned for upgrade of elasticsearch & logstash this week end ---
**Author:** ![Luca\_Belluccini](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/luca_belluccini/32/33239_2.png) [@Luca\_Belluccini](https://discuss.elastic.co/u/Luca_Belluccini)\ **Post date:** [April 30, 2020, 11:20am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/14 "2020-04-30T11:20:56Z")
Hello @hello4usharath the support will continue to troubleshoot the issue in the case you've opened. Please provide the cluster diagnostic, the logs on the ticket you've already opened. ---
**Author:** ![hello4usharath](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hello4usharath/32/19175_2.png) [@hello4usharath](https://discuss.elastic.co/u/hello4usharath)\ **Post date:** [April 30, 2020, 11:35am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/15 "2020-04-30T11:35:18Z")
All details have been provided ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 28, 2020, 11:35am UTC](https://discuss.elastic.co/t/logstash-connectively-issue-to-elasticsearch/230501/16 "2020-05-28T11:35:19Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.