# Logstash dropping events not accepting connections

**URL:** <https://discuss.elastic.co/t/logstash-dropping-events-not-accepting-connections/92399>\
**Category:** Logstash\
**Created:** [July 9, 2017, 4:20pm UTC](https://discuss.elastic.co/t/logstash-dropping-events-not-accepting-connections/92399 "2017-07-09T16:20:04Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Exocomp](https://avatars.discourse-cdn.com/v4/letter/e/ea5d25/32.png) [@Exocomp](https://discuss.elastic.co/u/Exocomp)\
**Post date:** [July 9, 2017, 4:20pm UTC](https://discuss.elastic.co/t/logstash-dropping-events-not-accepting-connections/92399/1 "2017-07-09T16:20:04Z")

</div>

I have a ELK box that is processing around 240 events per second and sending to Elasticsearch and Graphite.

At times when I'm trying to do a query in Kibana that takes a bit of searching, logstash will start dropping events.

Update: I was able to resolve the issue with using a message queue.

---

<div class="post-metadata">

**Author:** ![jsvd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsvd/32/6203_2.png) [@jsvd](https://discuss.elastic.co/u/jsvd)\
**Post date:** [July 10, 2017, 9:55am UTC](https://discuss.elastic.co/t/logstash-dropping-events-not-accepting-connections/92399/2 "2017-07-10T09:55:10Z")

</div>

which version of logstash are you using, for a while now the logstash output should never drop events but retry forever. If you're not seeing this it may be a bug.

Any errors on the logstash logs?

---

<div class="post-metadata">

**Author:** ![Exocomp](https://avatars.discourse-cdn.com/v4/letter/e/ea5d25/32.png) [@Exocomp](https://discuss.elastic.co/u/Exocomp)\
**Post date:** [July 13, 2017, 8:59pm UTC](https://discuss.elastic.co/t/logstash-dropping-events-not-accepting-connections/92399/3 "2017-07-13T20:59:42Z")

</div>

My setup changed a bit recently so I'll have to see, but so far looks good, I was on 5.3.1 upgraded to 5.5.0 and added a message queue to the mix and decoupled the processing a bit.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 10, 2017, 8:59pm UTC](https://discuss.elastic.co/t/logstash-dropping-events-not-accepting-connections/92399/4 "2017-08-10T20:59:43Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.