Logstash retry with exponential backoff

Elastic Stack Logstash
1

OK I installed x-pack and finally got all the credentials in the correct places(including winlogbeats on WEC) but now getting new error in logstash logs -

[2017-11-07T14:29:34,577][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>403, :url=>"http://10.68.168.21:9200/_bulk"}
[2017-11-07T14:29:34,650][ERROR][logstash.outputs.elasticsearch] Encountered a retryable error. Will Retry with exponential backoff {:code=>403, :url=>"http://10.68.168.21:9200/_bulk"}

Hoping this is the last one!!!

2

Alright, got it - not correctly but got it. Just added elastic superuser to conf.d elasticsearchoutput -

output {
elasticsearch {
hosts => ["10.68.168.21:9200"]
user => "elastic"
password => "xxxxxxxx"
sniffing => true
manage_template => true
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
}

... good enough for testing though.