# Logstash or redis issue? **URL:** \ **Category:** Logstash\ **Created:** [February 1, 2016, 6:07am UTC](https://discuss.elastic.co/t/logstash-or-redis-issue/40600 "2016-02-01T06:07:17Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Kishore](https://avatars.discourse-cdn.com/v4/letter/k/8edcca/32.png) [@Kishore](https://discuss.elastic.co/u/Kishore)\ **Post date:** [February 1, 2016, 6:07am UTC](https://discuss.elastic.co/t/logstash-or-redis-issue/40600/1 "2016-02-01T06:07:17Z")
Recently i have upgraded to ELK latest version. Every thing worked perfectly for some time. Later logstash shipper **syslog events** stuck at redis after some time , where as firewall events are flowing normally to logstash indexer. What would be the possible cause for this situation. redis input and output configurations looks like below. **Logstash output configuration for redis at shipper** output { redis { host =\> ["host1:7000", "host1:7001", "host2:7002", "host2:7003", "host3:7004", "host3:7005"] data\_type =\> "list" key =\> "syslog" } } **Logstash input configuraton for redis at logstash indexer** input { redis { host =\> "host1" port =\> "7000" data\_type =\> "list" key =\> "syslog" } redis { host =\> "host1" port =\> "7001" data\_type =\> "list" key =\> "syslog" } redis { host =\> "host2" port =\> "7002" data\_type =\> "list" key =\> "syslog" } redis { host =\> "host2" port =\> "7003" data\_type =\> "list" key =\> "syslog" } redis { host =\> "host3" port =\> "7004" data\_type =\> "list" key =\> "syslog" } redis { host =\> "host3" port =\> "7005" data\_type =\> "list" key =\> "syslog" } } ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [February 1, 2016, 6:14am UTC](https://discuss.elastic.co/t/logstash-or-redis-issue/40600/2 "2016-02-01T06:14:12Z")
That config is _really_ hard to read, can you properly format it? ---
**Author:** ![Kishore](https://avatars.discourse-cdn.com/v4/letter/k/8edcca/32.png) [@Kishore](https://discuss.elastic.co/u/Kishore)\ **Post date:** [February 1, 2016, 6:24am UTC](https://discuss.elastic.co/t/logstash-or-redis-issue/40600/3 "2016-02-01T06:24:58Z")
Hi Mark Walkom, I have formatted, please check . ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [February 1, 2016, 7:36am UTC](https://discuss.elastic.co/t/logstash-or-redis-issue/40600/4 "2016-02-01T07:36:08Z")
> [@Kishore](#): > > redis { host =\> "host1" port =\> "7000" data\_type =\> "list" key =\> "syslog" } redis { host =\> "host1" port =\> "7001" data\_type =\> "list" key =\> "syslog" } redis { host =\> "host2" port =\> "7001" data\_type =\> "list" key =\> "syslog" } redis { host =\> "host2" port =\> "7001" data\_type =\> "list" key =\> "syslog" } redis { host =\> "host3" port =\> "7001" data\_type =\> "list" key =\> "syslog" } redis { host =\> "host3" port =\> "7001" data\_type =\> "list" key =\> "syslog" } The host and post combinations in the input contain duplicates (host2:7001 and host3:7001) and do not match the ones specified in the output. Is this actually the case or just an error when masking the real values? ---
**Author:** ![Kishore](https://avatars.discourse-cdn.com/v4/letter/k/8edcca/32.png) [@Kishore](https://discuss.elastic.co/u/Kishore)\ **Post date:** [February 1, 2016, 8:15am UTC](https://discuss.elastic.co/t/logstash-or-redis-issue/40600/5 "2016-02-01T08:15:22Z")
This is copy paste problem by me, i edited the conf file, you can check now. Sorry for inconvenience . ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [February 1, 2016, 9:08am UTC](https://discuss.elastic.co/t/logstash-or-redis-issue/40600/6 "2016-02-01T09:08:13Z")
Are the firewall events also coming into the Logstash indexer through the Redis queues? Does the indexer have any other inputs defined? ---
**Author:** ![Kishore](https://avatars.discourse-cdn.com/v4/letter/k/8edcca/32.png) [@Kishore](https://discuss.elastic.co/u/Kishore)\ **Post date:** [February 1, 2016, 9:44am UTC](https://discuss.elastic.co/t/logstash-or-redis-issue/40600/7 "2016-02-01T09:44:07Z")
Yes firewall events also coming to the logstash indexer (firewall indexer) through redis , but these events flowing. we are having different config files for syslog and firewall events. inputs defined for syslog config files above. ---
**Author:** ![Kishore](https://avatars.discourse-cdn.com/v4/letter/k/8edcca/32.png) [@Kishore](https://discuss.elastic.co/u/Kishore)\ **Post date:** [February 1, 2016, 10:14am UTC](https://discuss.elastic.co/t/logstash-or-redis-issue/40600/8 "2016-02-01T10:14:26Z")
At the same time Redis throwing below warning Redis connection problem {:exception=\>Redis::CommandError: CROSSSLOT Keys in request don't hash to the same slot\>, :level=\>:warn} ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 5:13am UTC](https://discuss.elastic.co/t/logstash-or-redis-issue/40600/9 "2017-07-06T05:13:34Z")