# Logstash input from tcp/udp protocol
**URL:** https://discuss.elastic.co/t/logstash-input-from-tcp-udp-protocol/57055
**Category:** Logstash
**Created:** [August 2, 2016, 10:10pm UTC](https://discuss.elastic.co/t/logstash-input-from-tcp-udp-protocol/57055 "2016-08-02T22:10:01Z")
**Posts on this page:** 9
**Page:** 1
### Author:  [@bishaka](https://discuss.elastic.co/u/bishaka)
#### Post date: [August 2, 2016, 10:10pm UTC](https://discuss.elastic.co/t/logstash-input-from-tcp-udp-protocol/57055/1 "2016-08-02T22:10:01Z")
Hi,
I am trying to send some JSON formatted logs to elasticsearch over tcp/udp protocol for visualizations in Kibana. I have the config file below:
input {
tcp {
host =\> "[http://nimhts23.hm230.org](http://nimhts23.hm230.org)"
port =\> 8983
type =\> syslog
}
udp {
host =\> "[http://nimhts23.hm230.org](http://nimhts23.hm230.org)"
port =\> 8983
type =\> syslog
}
}
output {
elastisearch {
protocol =\> "http"
host =\> "10.45.31.897"
port =\> 5600
index =\> "SolrData"
document\_type =\> "realtime"
stdout { codec =\> rubydebug }
}
}
However, when I run this, i get the error " initialize: name or service not known
-bash: initialize:: command not found"
I am not sure what this means..
---
### Author:  [@bishaka](https://discuss.elastic.co/u/bishaka)
#### Post date: [August 2, 2016, 10:36pm UTC](https://discuss.elastic.co/t/logstash-input-from-tcp-udp-protocol/57055/2 "2016-08-02T22:36:26Z")
I also tried using the httppoll plugin in logstash...however,.. i get an http failure message
input {
http\_poller {
urls =\> {
test1 =\> "[http://nimhts23.hm230.org/solr/col\_dashv1\_shard2\_replica2/select?q=](http://nimhts23.hm230.org/solr/col_dashv1_shard2_replica2/select?q=)_%3A_&wt=json&indent=true"
}
```
request_timeout => 60
interval => 60
codec => "json"
```
}
}
output {
elasticsearch {
hosts =\> "10.45.31.897"
```
}
```
}
I get the following message:
@version:1 @timestamp:August 2nd 2016, 15:29:24.663 tags:\_http\_request\_failure http\_request\_failure.request.method:get http\_request\_failure.request.url:[http://nimhts23.hm230.org/solr/col\_dashv1\_shard2\_replica2/select?q=](http://nimhts23.hm230.org/solr/col_dashv1_shard2_replica2/select?q=)_%3A_&wt=json&indent=true http\_request\_failure.name:test1 http\_request\_failure.error:nimhts23.hm230.org: unknown error http\_request\_failure.backtrace: - http\_request\_failure.runtime\_seconds:0.284 \_id:AVZNYEFVvm06ECqo53r0 \_type:logs \_index:logstash-2016.08.02 \_score:
---
### Author:  [@anhlqn](https://discuss.elastic.co/u/anhlqn)
#### Post date: [August 2, 2016, 10:38pm UTC](https://discuss.elastic.co/t/logstash-input-from-tcp-udp-protocol/57055/3 "2016-08-02T22:38:11Z")
Are you running Logstash to listen to incoming syslog on port 8983? If yes, then remove the follow
> [@bishaka](#):
>
> host =\> "[http://nimhts23.hm230.org](http://nimhts23.hm230.org)"
---
### Author:  [@bishaka](https://discuss.elastic.co/u/bishaka)
#### Post date: [August 2, 2016, 10:52pm UTC](https://discuss.elastic.co/t/logstash-input-from-tcp-udp-protocol/57055/4 "2016-08-02T22:52:54Z")
I tried that. No luck ☹
I get the following error:
Could not start TCP server: Address in use {:host=\>"0.0.0.0", :port=\>8983, :level=\>:error}
The error reported is:
Address already in use - bind - Address already in use
---
### Author:  [@bishaka](https://discuss.elastic.co/u/bishaka)
#### Post date: [August 2, 2016, 11:30pm UTC](https://discuss.elastic.co/t/logstash-input-from-tcp-udp-protocol/57055/5 "2016-08-02T23:30:50Z")
Is it a plugin i need to install though?
---
### Author:  [@anhlqn](https://discuss.elastic.co/u/anhlqn)
#### Post date: [August 2, 2016, 11:39pm UTC](https://discuss.elastic.co/t/logstash-input-from-tcp-udp-protocol/57055/6 "2016-08-02T23:39:13Z")
> [@bishaka](#):
>
> TCP server: Address in use {:host=\>"0.0.0.0", :port=\>8983, :level=\>:error}
Use one port for TCP and a different port for UDP. Ex: 8983 for TCP and 8984 for UDP
---
### Author:  [@bishaka](https://discuss.elastic.co/u/bishaka)
#### Post date: [August 2, 2016, 11:45pm UTC](https://discuss.elastic.co/t/logstash-input-from-tcp-udp-protocol/57055/7 "2016-08-02T23:45:53Z")
Still same issue.
---
### Author:  [@bishaka](https://discuss.elastic.co/u/bishaka)
#### Post date: [August 2, 2016, 11:48pm UTC](https://discuss.elastic.co/t/logstash-input-from-tcp-udp-protocol/57055/8 "2016-08-02T23:48:44Z")
I tried the following method as shown in the post:
>
Dioing this way gets me the following error message:
@version:1 @timestamp:August 2nd 2016, 15:29:24.663 tags:httprequest\_failure http\_request\_failure.request.method:get http\_request\_failure.request.url:[http://nimhts23.hm230.org/solr/col\_dashv1\_shard2\_replica2/select?q=%3A&wt=json&indent=true](http://nimhts23.hm230.org/solr/col_dashv1_shard2_replica2/select?q=%3A&wt=json&indent=true) http\_request\_failure.name:test1 http\_request\_failure.error:nimhts23.hm230.org: unknown error http\_request\_failure.backtrace: - http\_request\_failure.runtime\_seconds:0.284 \_id:AVZNYEFVvm06ECqo53r0 \_type:logs \_index:logstash-2016.08.02 \_score:
I used the following config file:
input {
http\_poller {
urls =\> {
test1 =\> "[http://nimhts23.hm230.org/solr/col\_dashv1\_shard2\_replica2/select?q=%3A&wt=json&indent=true](http://nimhts23.hm230.org/solr/col_dashv1_shard2_replica2/select?q=%3A&wt=json&indent=true)"
}
request\_timeout =\> 60
interval =\> 60
codec =\> "json"
}
}
output {
elasticsearch {
hosts =\> "10.45.31.897"
```
}
```
}
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 4:45am UTC](https://discuss.elastic.co/t/logstash-input-from-tcp-udp-protocol/57055/9 "2017-07-06T04:45:09Z")