# Logstash Dies when Elasticsearch is restarted

**URL:** <https://discuss.elastic.co/t/logstash-dies-when-elasticsearch-is-restarted/42783>\
**Category:** Logstash\
**Created:** [February 25, 2016, 9:48pm UTC](https://discuss.elastic.co/t/logstash-dies-when-elasticsearch-is-restarted/42783 "2016-02-25T21:48:59Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bradly](https://avatars.discourse-cdn.com/v4/letter/b/90ced4/32.png) [@Bradly](https://discuss.elastic.co/u/Bradly)\
**Post date:** [February 25, 2016, 9:48pm UTC](https://discuss.elastic.co/t/logstash-dies-when-elasticsearch-is-restarted/42783/1 "2016-02-25T21:48:59Z")

</div>

Everytime I restart any of the elasticsearch nodes they logstash server stops sending logs to any of them. I have it setup to send data to all 5 host in my cluster from the netflow on our core router. The output lines look like this:

output {  
elasticsearch {  
index =\> "logstash-cisco-asa-5512-netflow-%{+YYYY.MM.dd}"  
hosts =\> ["172.16.0.5:9200", "172.16.0.4:9200", "172.16.0.3:9200"]  
flush\_size =\> 1  
}

I am still pretty new to this whole ELK process but am really enjoying learning it and being able to process the data from our busy core router in real time is an awesome feat.

Brad

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [February 26, 2016, 12:27am UTC](https://discuss.elastic.co/t/logstash-dies-when-elasticsearch-is-restarted/42783/2 "2016-02-26T00:27:17Z")

</div>

When you restart your node, is the cluster as a whole still available?

Are you following the restart procedure? [https://www.elastic.co/guide/en/elasticsearch/guide/master/\_rolling\_restarts.html](https://www.elastic.co/guide/en/elasticsearch/guide/master/_rolling_restarts.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:09am UTC](https://discuss.elastic.co/t/logstash-dies-when-elasticsearch-is-restarted/42783/3 "2017-07-06T05:09:42Z")

</div>