# Spammy Logs **URL:** \ **Category:** Elastic Security\ **Created:** [October 5, 2020, 7:49pm UTC](https://discuss.elastic.co/t/spammy-logs/251046 "2020-10-05T19:49:42Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![animageofmine](https://avatars.discourse-cdn.com/v4/letter/a/7feea3/32.png) [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Post date:** [October 5, 2020, 7:49pm UTC](https://discuss.elastic.co/t/spammy-logs/251046/1 "2020-10-05T19:49:42Z")
We enabled security on Elastic recently (6.8). We see a crazy amount of logs with the following stacktrace even though all the requests we observe are using the right credentials. It has filed the docker logs by about 22G already. Thoughts? ```auto caught exception while handling client http traffic, closing connection [ id: 0x4d96587c, L:0.0.0.0/0.0.0.0:9200 ! R:/101.60.12.33:33068] io.netty.handler.codec.DecoderException: io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record: 474554202f636c7573746572706f6f6c732f636c7573746572706f6f6c2f64656661756c74436c757374657 2506f6f6c20485454502f312e310d0a686f73743a20616e616c7974696373656e67696e652d63616368656d616e6167657230312e736572766963652e67312d6961642e636f6e73756c3a393230300d0a6163636570743a206170706c6963617469 6f6e2f6a736f6e0d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:472) ~[netty-codec-4.1.32.Final.jar:4.1.32.Final] at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:278) ~[netty-codec-4.1.32.Final.jar:4.1.32.Final] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362) [netty-transport-4.1.32.Final.jar:4.1.32.Final] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348) [netty-transport-4.1.32.Final.jar:4.1.32.Final] at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340) [netty-transport-4.1.32.Final.jar:4.1.32.Final] at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1434) [netty-transport-4.1.32.Final.jar:4.1.32.Final] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362) [netty-transport-4.1.32.Final.jar:4.1.32.Final] at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348) [netty-transport-4.1.32.Final.jar:4.1.32.Final] at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:965) [netty-transport-4.1.32.Final.jar:4.1.32.Final] at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:163) [netty-transport-4.1.32.Final.jar:4.1.32.Final] at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:656) [netty-transport-4.1.32.Final.jar:4.1.32.Final] at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:556) [netty-transport-4.1.32.Final.jar:4.1.32.Final] at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:510) [netty-transport-4.1.32.Final.jar:4.1.32.Final] at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:470) [netty-transport-4.1.32.Final.jar:4.1.32.Final] at io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:909) [netty-common-4.1.32.Final.jar:4.1.32.Final] at java.lang.Thread.run(Thread.java:748) [?:1.8.0_252] ``` ---
**Author:** ![Frank\_Hassanabad](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/frank_hassanabad/32/49255_2.png) [@Frank\_Hassanabad](https://discuss.elastic.co/u/Frank_Hassanabad)\ **Post date:** [October 7, 2020, 9:08pm UTC](https://discuss.elastic.co/t/spammy-logs/251046/2 "2020-10-07T21:08:13Z")
Hi @animageofmine, This part of the forums is usually for security solutions such as SIEM/Endpoint, you might have better luck in another area. However, looking around I see this thread here: > [@ssl.NotSslRecordException](https://discuss.elastic.co/t/ssl-notsslrecordexception/183655/2): > > when you have a http vs https mismatch, NotSslRecordException usually occurs. Check whether the request is https. That might help you out and point you in the right direction. Good luck ☘ ---
**Author:** ![animageofmine](https://avatars.discourse-cdn.com/v4/letter/a/7feea3/32.png) [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Post date:** [October 8, 2020, 8:08am UTC](https://discuss.elastic.co/t/spammy-logs/251046/3 "2020-10-08T08:08:43Z")
Thanks. I'll post it in another section unless you can move the post to appropriate category. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 4, 2022, 8:14am UTC](https://discuss.elastic.co/t/spammy-logs/251046/4 "2022-11-04T08:14:43Z")