# logstash-output-elasticsearch error

**URL:** <https://discuss.elastic.co/t/logstash-output-elasticsearch-error/387936>\
**Category:** Logstash\
**Created:** [July 9, 2026, 5:50am UTC](https://discuss.elastic.co/t/logstash-output-elasticsearch-error/387936 "2026-07-09T05:50:47Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![wujun](https://avatars.discourse-cdn.com/v4/letter/w/3be4f8/32.png) [@wujun](https://discuss.elastic.co/u/wujun)\
**Post date:** [July 9, 2026, 5:50am UTC](https://discuss.elastic.co/t/logstash-output-elasticsearch-error/387936/1 "2026-07-09T05:50:47Z")

</div>

[WARN] 2026-07-09 10:54:37.480 [Ruby-0-Thread-9: /usr/share/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-output-elasticsearch-12.1.3-java/lib/logstash/outputs/elasticsearch/http\_client/pool.rb:234] elasticsearch - Failed to perform request {message: "Unsupported or unrecognized SSL message", exception: Manticore::UnknownException, cause: #\<Java::JavaxNetSsl::SSLException: Unsupported or unrecognized SSL message\>}  
[WARN] 2026-07-09 10:54:37.482 [Ruby-0-Thread-9: /usr/share/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-output-elasticsearch-12.1.3-java/lib/logstash/outputs/elasticsearch/http\_client/pool.rb:234] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {url: "[https://elastic:xxxxxx@localhost:9200/](https://elastic:xxxxxx@localhost:9200/)", exception: LogStash::Outputs::Elasticsearch::HttpClient::Pool::HostUnreachableError, message: "Elasticsearch Unreachable: [[https://localhost:9200/\](https://localhost:9200/%5C)][Manticore::UnknownException] Unsupported or unrecognized SSL message"}  
[WARN] 2026-07-09 10:54:42.505 [Ruby-0-Thread-9: /usr/share/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-output-elasticsearch-12.1.3-java/lib/logstash/outputs/elasticsearch/http\_client/pool.rb:234] elasticsearch - Failed to perform request {message: "Unsupported or unrecognized SSL message", exception: Manticore::UnknownException, cause: #\<Java::JavaxNetSsl::SSLException: Unsupported or unrecognized SSL message\>}  
[WARN] 2026-07-09 10:54:42.507 [Ruby-0-Thread-9: /usr/share/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-output-elasticsearch-12.1.3-java/lib/logstash/outputs/elasticsearch/http\_client/pool.rb:234] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {url: "[https://elastic:xxxxxx@localhost:9200/](https://elastic:xxxxxx@localhost:9200/)", exception: LogStash::Outputs::Elasticsearch::HttpClient::Pool::HostUnreachableError, message: "Elasticsearch Unreachable: [[https://localhost:9200/\](https://localhost:9200/%5C)][Manticore::UnknownException] Unsupported or unrecognized SSL message"}

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [July 9, 2026, 11:44am UTC](https://discuss.elastic.co/t/logstash-output-elasticsearch-error/387936/2 "2026-07-09T11:44:44Z")

</div>

Welcome to the community!

Can you show us how you set params in the output?

---

<div class="post-metadata">

**Author:** ![rijinmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rijinmp/32/24634_2.png) [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Post date:** [August 20, 2026, 10:43am UTC](https://discuss.elastic.co/t/logstash-output-elasticsearch-error/387936/3 "2026-08-20T10:43:31Z")

</div>

Logstash is trying to connect to Elasticsearch using HTTPS, but Elasticsearch on localhost:9200 is actually serving HTTP.

The key part is:

Unsupported or unrecognized SSL message

And your Logstash URL is: [https://localhost:9200/](https://localhost:9200/)

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [August 20, 2026, 10:49am UTC](https://discuss.elastic.co/t/logstash-output-elasticsearch-error/387936/4 "2026-08-20T10:49:20Z")

</div>

> [@Rios](#):
>
> Can you show us how you set params in the output?

Please show us your output params, especially SSL part