# Logstash halted with error: Connection reset by peer

**URL:** <https://discuss.elastic.co/t/logstash-halted-with-error-connection-reset-by-peer/223713>\
**Category:** Logstash\
**Created:** [March 16, 2020, 8:44am UTC](https://discuss.elastic.co/t/logstash-halted-with-error-connection-reset-by-peer/223713 "2020-03-16T08:44:13Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![norup](https://avatars.discourse-cdn.com/v4/letter/n/dfb087/32.png) [@norup](https://discuss.elastic.co/u/norup)\
**Post date:** [March 16, 2020, 8:44am UTC](https://discuss.elastic.co/t/logstash-halted-with-error-connection-reset-by-peer/223713/1 "2020-03-16T08:44:14Z")

</div>

My logstash stopped over the weekend for some reason. I currently only have 1 beat. winlogbeat, shipping its logs to it, but if it breaks every time some1 restarts their PC or something, then thats obviously going to be an issue. I now dont have logs from the last 2 days. It worked friday, and then it looks like it broke saturday the 14th  
What could be the problem here?

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/2/429310a0e670a53882dd0943cbc8f19255b5cc32.jpeg)

\*\*EDIT

Maybe this is actually an Elasticsearch issue. Im getting this alot:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/f/2f30cf06ed21e9859c0d9b6e5241d62c93b07ebb.png)  
Which i think means something is wrong with my resource amounts. The VM has 64GB memory so that should be plenty. The `jvm.options` has `-Xms16g` and `-Xmx16g`.  
What else is relevant here? There is something about shards and indices im not really understanding

---

<div class="post-metadata">

**Author:** ![norup](https://avatars.discourse-cdn.com/v4/letter/n/dfb087/32.png) [@norup](https://discuss.elastic.co/u/norup)\
**Post date:** [March 17, 2020, 9:09am UTC](https://discuss.elastic.co/t/logstash-halted-with-error-connection-reset-by-peer/223713/2 "2020-03-17T09:09:52Z")

</div>

I tried reading this [https://www.elastic.co/blog/how-many-shards-should-i-have-in-my-elasticsearch-cluster](https://www.elastic.co/blog/how-many-shards-should-i-have-in-my-elasticsearch-cluster), but i just dont really understand what im dealing with yet. I followed the "getting started" guide, and a couple of days later this happened. Not sure how many shards or indexes i have. There should not be a large amount of data. I have had 2 beats running for a couple of days on stale devices, so i cant imagine the space usage being the issue.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 14, 2020, 9:09am UTC](https://discuss.elastic.co/t/logstash-halted-with-error-connection-reset-by-peer/223713/3 "2020-04-14T09:09:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
