# Retryable error when running logstash config

**URL:** <https://discuss.elastic.co/t/retryable-error-when-running-logstash-config/156228>\
**Category:** Logstash\
**Created:** [November 12, 2018, 4:53am UTC](https://discuss.elastic.co/t/retryable-error-when-running-logstash-config/156228 "2018-11-12T04:53:08Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Eva](https://avatars.discourse-cdn.com/v4/letter/e/dbc845/32.png) [@Eva](https://discuss.elastic.co/u/Eva)\
**Post date:** [November 12, 2018, 4:53am UTC](https://discuss.elastic.co/t/retryable-error-when-running-logstash-config/156228/1 "2018-11-12T04:53:08Z")

</div>

Hello there

I'm new to ELk and playing around with diff logstash confg. While running the same, i see below error:

[ERROR] 2018-11-12 04:44:37.028 [[main]\>worker1] elasticsearch - Encountered a retryable error. Will Retry with exponential backoff {:code=\>401, :url=\>"[http://localhost:9200/\_bulk](http://localhost:9200/_bulk)"}  
[ERROR] 2018-11-12 04:44:38.166 [[main]\>worker0] elasticsearch - Encountered a retryable error. Will Retry with exponential backoff {:code=\>401, :url=\>"[http://localhost:9200/\_bulk](http://localhost:9200/_bulk)"}  
[ERROR] 2018-11-12 04:45:09.036 [[main]\>worker1] elasticsearch - Encountered a retryable error. Will Retry with exponential backoff {:code=\>401, :url=\>"[http://localhost:9200/\_bulk](http://localhost:9200/_bulk)"}

What does the error mean? I couldn't find much on the forum regarding this 401 error. I have x-pack plugin installed now. Does it cause the issue ? Kindly help.

Thanks!

---

<div class="post-metadata">

**Author:** ![Eva](https://avatars.discourse-cdn.com/v4/letter/e/dbc845/32.png) [@Eva](https://discuss.elastic.co/u/Eva)\
**Post date:** [November 12, 2018, 5:01am UTC](https://discuss.elastic.co/t/retryable-error-when-running-logstash-config/156228/2 "2018-11-12T05:01:35Z")

</div>

To add to the above, I'm running logstash 5.6.11. I wasn't getting this error before when i tried running the config probably two months ago. I'm shipping cloudltrail logs to ES and i could see them displayed on Kibana successfully. Post that, i recently installed X-pack and i guess the 401 is auth failure because of the x-pack? If yes, how do i fix it.

---

<div class="post-metadata">

**Author:** ![Makra](https://avatars.discourse-cdn.com/v4/letter/m/8491ac/32.png) [@Makra](https://discuss.elastic.co/u/Makra)\
**Post date:** [November 12, 2018, 5:32am UTC](https://discuss.elastic.co/t/retryable-error-when-running-logstash-config/156228/3 "2018-11-12T05:32:10Z")

</div>

> [@Eva](#):
>
> elasticsearch - Encountered a retryable error. Will Retry with exponential backoff

Probably you need to pass elasticsearch user and password that you may have already configured while installing X-pack.

```
output {
elasticsearch {

  hosts => ["localhost:9200"]
  user => "admin"
  password => "password"

 }
}

```

---

<div class="post-metadata">

**Author:** ![Eva](https://avatars.discourse-cdn.com/v4/letter/e/dbc845/32.png) [@Eva](https://discuss.elastic.co/u/Eva)\
**Post date:** [November 12, 2018, 5:50am UTC](https://discuss.elastic.co/t/retryable-error-when-running-logstash-config/156228/4 "2018-11-12T05:50:04Z")

</div>

Thank you Makra! That worked.

Regards

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 10, 2018, 5:50am UTC](https://discuss.elastic.co/t/retryable-error-when-running-logstash-config/156228/5 "2018-12-10T05:50:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.