# Odd 'Connection Reset by peer' issue when URL contains a query string

**URL:** <https://discuss.elastic.co/t/odd-connection-reset-by-peer-issue-when-url-contains-a-query-string/21835>\
**Category:** Elasticsearch\
**Created:** [January 26, 2015, 5:25pm UTC](https://discuss.elastic.co/t/odd-connection-reset-by-peer-issue-when-url-contains-a-query-string/21835 "2015-01-26T17:25:39Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ian\_MacLennan](https://avatars.discourse-cdn.com/v4/letter/i/7993a0/32.png) [@Ian\_MacLennan](https://discuss.elastic.co/u/Ian_MacLennan)\
**Post date:** [January 26, 2015, 5:25pm UTC](https://discuss.elastic.co/t/odd-connection-reset-by-peer-issue-when-url-contains-a-query-string/21835/1 "2015-01-26T17:25:39Z")

</div>

Hi all,

So I have an ES cluster that is currently exhibiting the following  
properties:

If I do:

> curl -k -vv [http://elasticsearch.example.com:9200/logstash\*/\_search](http://elasticsearch.example.com:9200/logstash*/_search)  
> The request returns properly with the expected results (I get a 200 OK  
> with the search results).

If I do:

curl -k -vv [http://elasticsearch.example.com:9200/logstash\*/\_search?pretty](http://elasticsearch.example.com:9200/logstash*/_search?pretty)

I get:

> - Recv failure: Connection reset by peer
> - Closing connection 0  
> curl: (56) Recv failure: Connection reset by peer

If I do:

curl -k -vv [http://elasticsearch.example.com:9200/logstash\*/\_search/?pretty](http://elasticsearch.example.com:9200/logstash*/_search/?pretty)

The request also returns normally (a 200 OK)

If I do either of these from one of the machines in the cluster, all of  
them work.

So it seems to be network interference somewhere. My question is, has  
anybody seen Elasticsearch do this, and if so, what was the resolution?

If not, does anybody have any tips as to how I might track this down? Also  
this is newer behaviour within the past week or so, which is also odd.

Thanks,

Ian

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/4f4e6bfe-2ab0-4c38-9709-55ad440b941f%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/4f4e6bfe-2ab0-4c38-9709-55ad440b941f%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 12:36am UTC](https://discuss.elastic.co/t/odd-connection-reset-by-peer-issue-when-url-contains-a-query-string/21835/2 "2017-07-06T00:36:36Z")

</div>