# Logstash - Retry with exponential backoff code=\>400,

**URL:** <https://discuss.elastic.co/t/logstash-retry-with-exponential-backoff-code-400/242849>\
**Category:** Logstash\
**Created:** [July 28, 2020, 7:34am UTC](https://discuss.elastic.co/t/logstash-retry-with-exponential-backoff-code-400/242849 "2020-07-28T07:34:15Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![GraceYu](https://avatars.discourse-cdn.com/v4/letter/g/dbc845/32.png) [@GraceYu](https://discuss.elastic.co/u/GraceYu)\
**Post date:** [July 28, 2020, 7:34am UTC](https://discuss.elastic.co/t/logstash-retry-with-exponential-backoff-code-400/242849/1 "2020-07-28T07:34:15Z")

</div>

Hi,

I have started logstash with the following error:

## [2020-07-28T15:19:51,466][ERROR][logstash.outputs.elasticsearch][main][ac34975042de783740a7fba68d15a74cca99c92e561d5fc2f692e54892613f0d] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>"[http://host:9200/\_bulk](http://host:9200/_bulk)"}

## Here is the config file:

input  
{  
#here we have used file plugin of logstash, specify what file we want to ingest  
file {  
#location of log file  
path =\> "/u01/logstash/logstash-7.8.0/logs"  
type =\> "logs"  
start\_position =\> "beginning"  
}  
beats {  
port =\> 5044  
}  
}  
#multiple pulgins are used in this filter stage  
filter  
{  
#grok plugin regular expression matcher, and we have used COMBINEDAPACHELOG here  
#you can use different pattern from this link [https://github.com/elastic/logstash/blob/v1.4.2/patterns/grok-patterns](https://github.com/elastic/logstash/blob/v1.4.2/patterns/grok-patterns)  
grok{  
match =\> {  
"message" =\> "%{COMBINEDAPACHELOG}"  
}  
}  
#mutate convert data types  
mutate{  
convert =\> { "bytes" =\> "integer" }  
}  
#date plugin format dates  
date {  
match =\> ["timestamp", "dd/MMM/YYYY:HH:mm:ss Z"]  
locale =\> en  
remove\_field =\> "timestamp"  
}  
#geoip filter gets client ip from request  
geoip {  
source =\> "clientip"  
}  
}

output  
{  
#standard output on console  
stdout {  
codec =\> rubydebug  
}  
#output to elasticsearch hosts  
elasticsearch {  
hosts =\> ["host:9200"]  
user =\> "user"  
password =\> "Pass"  
}

## }

Anyone, can guide on how to resolve this issue?

Thanks,  
Grace

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 25, 2020, 7:34am UTC](https://discuss.elastic.co/t/logstash-retry-with-exponential-backoff-code-400/242849/2 "2020-08-25T07:34:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.