# Lumberjack - LogStash SizedQueueTimeout TimeoutError

**URL:** https://discuss.elastic.co/t/lumberjack-logstash-sizedqueuetimeout-timeouterror/53437
**Category:** Logstash
**Created:** [June 21, 2016, 7:21am UTC](https://discuss.elastic.co/t/lumberjack-logstash-sizedqueuetimeout-timeouterror/53437 "2016-06-21T07:21:52Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![YLombardi](https://avatars.discourse-cdn.com/v4/letter/y/43a26b/32.png) [@YLombardi](https://discuss.elastic.co/u/YLombardi)
#### Post date: [June 21, 2016, 7:21am UTC](https://discuss.elastic.co/t/lumberjack-logstash-sizedqueuetimeout-timeouterror/53437/1 "2016-06-21T07:21:52Z")

</div>

Hi.

I use ELK with Logstash forwarder.  
Sometimes I have a lot of error in my logstash.log :

> **[LogStash::SizedQueueTimeout::TimeoutError - Pastebin.com](https://pastebin.com/qYJxrGrk)**
>
> Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

Here is my logstash configuration :

> input {  
> lumberjack {  
> port =\> 5000  
> type =\> "logs"  
> ssl\_certificate =\> "/etc/logstash/mycrt.crt"  
> ssl\_key =\> "/etc/logstash/mykey.key"  
> codec =\> json {  
> charset =\> "Windows-1252"  
> }  
> }  
> lumberjack {  
> port =\> 5001  
> type =\> "logs"  
> ssl\_certificate =\> "/etc/logstash/mycrt.crt"  
> ssl\_key =\> "/etc/logstash/mykey.key"  
> codec =\> plain {  
> charset =\> "Windows-1252"  
> }  
> }  
> }  
> output {  
> if "grokparsefailure" in [tags] or "dateparsefailure" in [tags] {  
> file {  
> path =\> "/var/log/logstash/parsefailure.log"  
> }  
> }  
> elasticsearch {  
> hosts =\> ["myhost:9200"]  
> sniffing =\> true  
> manage\_template =\> false  
> index =\> "logstash-%{+YYYY.MM.dd}"  
> }  
> stdout {  
> codec =\> rubydebug  
> }  
> }

I tried to :

- increase the "congestion\_threshold" of lumberjack.
- increase the heap size of Elasticsearch to 2g
- increase the heap size of Logstash to 2g
- delete old index in Elasticsearch

This doesn't solve the issue.  
What can I do ?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 4:51am UTC](https://discuss.elastic.co/t/lumberjack-logstash-sizedqueuetimeout-timeouterror/53437/2 "2017-07-06T04:51:36Z")

</div>