# Logstash indexing Error

**URL:** <https://discuss.elastic.co/t/logstash-indexing-error/304627>\
**Category:** Elasticsearch\
**Created:** [May 13, 2022, 1:15am UTC](https://discuss.elastic.co/t/logstash-indexing-error/304627 "2022-05-13T01:15:43Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![shrikantgulia](https://avatars.discourse-cdn.com/v4/letter/s/c68b51/32.png) [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Post date:** [May 13, 2022, 1:15am UTC](https://discuss.elastic.co/t/logstash-indexing-error/304627/1 "2022-05-13T01:15:43Z")

</div>

Dear Team,

while indexing the logs from wazuh to logstash and from logstash while indexing to ES getting the error  
Attempted to send a bulk request but Elasticsearch appears to be unreachable or down {:message=\>"Elasticsearch Unreachable: [[http://elastic:xxxxxx@IP:9200/](http://elastic:xxxxxx@IP:9200/)][Manticore::SocketException] Connection reset by peer (Write failed)"

I checked my ES cluster is up and running fine and in the output more then one ES nodes have been mentioned.  
before some days it was running fine and indexing the logs in ES.

can someone please guide .

Regards

---

<div class="post-metadata">

**Author:** ![Tomo\_M](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/32.png) [@Tomo\_M](https://discuss.elastic.co/u/Tomo_M)\
**Post date:** [May 13, 2022, 7:42am UTC](https://discuss.elastic.co/t/logstash-indexing-error/304627/2 "2022-05-13T07:42:34Z")

</div>

Hi,

I suppose the `hosts` setting (`http://elastic:xxxxxx@ip:9200/`) does not match [specification](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-elasticsearch.html#plugins-inputs-elasticsearch-hosts).  
It may be `IP`, `HOST`, `IP:port`, or `HOST:port`. Is it the reason??

---

<div class="post-metadata">

**Author:** ![shrikantgulia](https://avatars.discourse-cdn.com/v4/letter/s/c68b51/32.png) [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Post date:** [May 13, 2022, 7:57am UTC](https://discuss.elastic.co/t/logstash-indexing-error/304627/3 "2022-05-13T07:57:32Z")

</div>

Hi,

Thanks for the response  
IP is perfect i have intentionally removed the IP

May 12 15:24:42 nvmbdefgprv016789 logstash[9405]: [2022-05-12T15:24:42,766][WARN][logstash.outputs.Elasticsearch][checkw2][54bc95471cb1f3081f253d89473aca635f54a] Marking url as dead. Last error: [LogStash::Outputs::Elasticsearch::HttpClient::Pool::HostUnreachableError] Elasticsearch Unreachable: [[http://elastic:xxxxxx@IP:9200/](http://elastic:xxxxxx@IP:9200/)][Manticore::SocketException] Connection reset by peer (Write failed) {:url=\>[http://elastic:xxxxxx@IP:9200/](http://elastic:xxxxxx@IP:9200/), :error\_message=\>"Elasticsearch Unreachable: [[http://elastic:xxxxxx@IP:9200/](http://elastic:xxxxxx@IP:9200/)][Manticore::SocketException] Connection reset by peer (Write failed)", :error\_class=\>"LogStash::Outputs::Elasticsearch::HttpClient::Pool::HostUnreachableError"}May 12 15:24:42 nvmbdefgprv016789 logstash[9405]: [2022-05-12T15:24:42,767][ERROR][logstash.outputs.Elasticsearch][checkw2][54bc954789bd3ed19ea8a5b295cca635f54a] Attempted to send a bulk request but Elasticsearch appears to be unreachable or down {:message=\>"Elasticsearch Unreachable: [[http://elastic:xxxxxx@IP:9200/](http://elastic:xxxxxx@IP:9200/)][Manticore::SocketException] Connection reset by peer (Write failed)", :exception=\>LogStash::Outputs::Elasticsearch::HttpClient::Pool::HostUnreachableError, :will\_retry\_in\_seconds=\>32}May 12 15:24:43 nvmdfedprv016789 logstash[9405]: [2022-05-12T15:24:43,468][WARN][logstash.outputs.Elasticsearch][checkw2][54bc954789bf3081f253d89473acca635f54a] Marking url as dead. Last error: [LogStash::Outputs::Elasticsearch::HttpClient::Pool::HostUnreachableError] Elasticsearch Unreachable: [[http://elastic:xxxxxx@IP:9200/](http://elastic:xxxxxx@IP:9200/)][Manticore::SocketException] Connection reset {:url=\>[http://elastic:xxxxxx@IP:9200/](http://elastic:xxxxxx@IP:9200/), :error\_message=\>"Elasticsearch Unreachable: [[http://elastic:xxxxxx@IP:9200/](http://elastic:xxxxxx@IP:9200/)][Manticore::SocketException] Connection reset", :error\_class=\>"LogStash::Outputs::Elasticsearch::HttpClient::Pool::HostUnreachableError"}

Regards

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 10, 2022, 7:58am UTC](https://discuss.elastic.co/t/logstash-indexing-error/304627/4 "2022-06-10T07:58:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.