# Logstash2.4 Failed action. status 403

**URL:** <https://discuss.elastic.co/t/logstash2-4-failed-action-status-403/83521>\
**Category:** Logstash\
**Created:** [April 25, 2017, 8:29am UTC](https://discuss.elastic.co/t/logstash2-4-failed-action-status-403/83521 "2017-04-25T08:29:19Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![wongchao](https://avatars.discourse-cdn.com/v4/letter/w/839c29/32.png) [@wongchao](https://discuss.elastic.co/u/wongchao)\
**Post date:** [April 25, 2017, 8:29am UTC](https://discuss.elastic.co/t/logstash2-4-failed-action-status-403/83521/1 "2017-04-25T08:29:19Z")

</div>

```
    elasticsearch {
        index => "%{type}-%{+YYYY.MM.dd}"
        codec => "json"
        hosts => ["172.16.19.28"]
		flush_size => 5000
    }

```

Failed action. {:status=\>403, :action=\>["index", {:\_id=\>nil, :\_index=\>"cat\_zeyi\_php\_log-2017.03.30", :\_type=\>"cat\_zeyi\_php\_log", :\_routing=\>nil}, #\<LogStash::Event:0x2dfd07a0 @metadata\_accessors=#\<LogStash::Util::Accessors:0xdf93565 @store={}, @lut={}\>, @cancelled=false, @data={"@timestamp"=\>"2017-03-30T01:25:31.010Z", "beat"=\>{"hostname"=\>"[cvm-011.class.tj.idc.chinawayltd.com](http://cvm-011.class.tj.idc.chinawayltd.com)", "name"=\>"cvm.vpc-7rx1i8p0.qc-bj.172.18.3.3", "version"=\>"5.2.2"}, "fields"=\>{"redis\_index"=\>"webapps"}, "input\_type"=\>"log", "message"=\>"2017-03-30 09:20:49|124.115.206.149|/inside.php?t=json&m=zeyihighway&f=getCarnum|SQLDEBUG|SQL|Pbatis.query|{"dataSource":"","statement":"\/_master_\/ SELECT carnum, string1, string2, string3, string4, maindrivername, maindriverphone, maindriverid FROM zeyi\_truck WHERE deleted=0 AND carnum LIKE \"%3556%\" ;"}####", "offset"=\>325947597, "source"=\>"/data/web\_data/web/app/cat\_zeyi/tmp/log/SQLDEBUG.today.log", "tags"=\>["g7s"], "type"=\>"cat\_zeyi\_php\_log", "@version"=\>"1"}, @metadata={}, @accessors=#\<LogStash::Util::Accessors:0x7fbf39c2 @store={"@timestamp"=\>"2017-03-30T01:25:31.010Z", "beat"=\>{"hostname"=\>"[cvm-011.class.tj.idc.chinawayltd.com](http://cvm-011.class.tj.idc.chinawayltd.com)", "name"=\>"cvm.vpc-7rx1i8p0.qc-bj.172.18.3.3", "version"=\>"5.2.2"}, "fields"=\>{"redis\_index"=\>"webapps"}, "input\_type"=\>"log", "message"=\>"2017-03-30 09:20:49|xxxxxx|/inside.php?t=json&m=zeyihighway&f=getCarnum|SQLDEBUG|SQL|Pbatis.query|{"dataSource":"","statement":"\/_master_\/ SELECT carnum, string1, string2, string3, string4, maindrivername, maindriverphone, maindriverid FROM zeyi\_truck WHERE deleted=0 AND carnum LIKE \"%3556%\" ;"}####", "offset"=\>325947597, "source"=\>"/data/web\_data/web/app/cat\_zeyi/tmp/log/SQLDEBUG.today.log", "tags"=\>["g7s"], "type"=\>"cat\_zeyi\_php\_log", "@version"=\>"1"}, @lut={"[type]"=\>[{"@timestamp"=\>"2017-03-30T01:25:31.010Z", "beat"=\>{"hostname"=\>"[cvm-011.class.tj.idc.chinawayltd.com](http://cvm-011.class.tj.idc.chinawayltd.com)", "name"=\>"cvm.vpc-7rx1i8p0.qc-bj.172.18.3.3", "version"=\>"5.2.2"}, "fields"=\>{"redis\_index"=\>"webapps"}, "input\_type"=\>"log", "message"=\>"2017-03-30 09:20:49|124.115.206.149|/inside.php?t=json&m=zeyihighway&f=getCarnum|SQLDEBUG|SQL|Pbatis.query|{"dataSource":"","statement":"\/_master_\/ SELECT carnum, string1, string2, string3, string4, maindrivername, maindriverphone, maindriverid FROM zeyi\_truck WHERE deleted=0 AND carnum LIKE \"%3556%\" ;"}####", "offset"=\>325947597, "source"=\>"/data/web\_data/web/app/cat\_zeyi/tmp/log/SQLDEBUG.today.log", "tags"=\>["g7s"], "type"=\>"cat\_zeyi\_php\_log", "@version"=\>"1"}, "type"], "[fields][redis\_index]"=\>[{"redis\_index"=\>"webapps"}, "redis\_index"], "type"=\>[{"@timestamp"=\>"2017-03-30T01:25:31.010Z", "beat"=\>{"hostname"=\>"[cvm-011.class.tj.idc.chinawayltd.com](http://cvm-011.class.tj.idc.chinawayltd.com)", "name"=\>"cvm.vpc-7rx1i8p0.qc-bj.172.18.3.3", "version"=\>"5.2.2"}, "fields"=\>{"redis\_index"=\>"webapps"}, "input\_type"=\>"log", "message"=\>"2017-03-30 09:20:49|124.115.206.149|/inside.php?t=json&m=zeyihighway&f=getCarnum|SQLDEBUG|SQL|Pbatis.query|{"dataSource":"","statement":"\/_master_\/ SELECT carnum, string1, string2, string3, string4, maindrivername, maindriverphone, maindriverid FROM zeyi\_truck WHERE deleted=0 AND carnum LIKE \"%3556%\" ;"}####", "offset"=\>325947597, "source"=\>"/data/web\_data/web/app/cat\_zeyi/tmp/log/SQLDEBUG.today.log", "tags"=\>["g7s"], "type"=\>"cat\_zeyi\_php\_log", "@version"=\>"1"}, "type"]}\>\>], :response=\>{"index"=\>{"\_index"=\>"cat\_zeyi\_php\_log-2017.03.30", "\_type"=\>"cat\_zeyi\_php\_log", "\_id"=\>nil, "status"=\>403, "error"=\>{"type"=\>"index\_closed\_exception", "reason"=\>"closed", "index"=\>"cat\_zeyi\_php\_log-2017.03.30"}}}, :level=\>:warn}

do anyone knows what's the problem?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 23, 2017, 8:29am UTC](https://discuss.elastic.co/t/logstash2-4-failed-action-status-403/83521/2 "2017-05-23T08:29:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.