# Logstash elasticsearch output and IP change

**URL:** <https://discuss.elastic.co/t/logstash-elasticsearch-output-and-ip-change/26422>\
**Category:** Logstash\
**Created:** [July 28, 2015, 3:23pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-and-ip-change/26422 "2015-07-28T15:23:50Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![fhoubart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fhoubart/32/3886_2.png) [@fhoubart](https://discuss.elastic.co/u/fhoubart)\
**Post date:** [July 28, 2015, 3:23pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-and-ip-change/26422/1 "2015-07-28T15:23:50Z")

</div>

Hi,

I'm facing a strage case where after changing the IP address of my ElasticSearch server, logstash keep trying to connect to the old IP.

The output configuration is:

```
output {
    elasticsearch { host => "192.168.10.4" }
}

```

I changed the IP address in the file, and when restarting logstash, it keeps throwing the following Exceptions, the ip address being the old one:

```
failed to connect to master [[Agamotto][BsPzqcu8RyyAEHPVinAhzw][myserver][inet[/192.168.10.4:9300]]], retrying...

```

I suspect something related to cluster management, how to tell to logstash to "forget" where it was connected before ?

---

<div class="post-metadata">

**Author:** ![suyograo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/suyograo/32/44898_2.png) [@suyograo](https://discuss.elastic.co/u/suyograo)\
**Post date:** [July 28, 2015, 3:59pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-and-ip-change/26422/2 "2015-07-28T15:59:44Z")

</div>

> [@fhoubart](#):
>
> 192.168.10.4

I see from the messages you have the same IPs (in the config and error message)? Can you do `curl 192.168.10.4:9200` and check if ES is up?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:33am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-and-ip-change/26422/3 "2017-07-06T05:33:35Z")

</div>