# TCP output hangs while sending syslog

**URL:** https://discuss.elastic.co/t/tcp-output-hangs-while-sending-syslog/109025
**Category:** Logstash
**Created:** [November 24, 2017, 11:58am UTC](https://discuss.elastic.co/t/tcp-output-hangs-while-sending-syslog/109025 "2017-11-24T11:58:36Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![vishal0708gautam](https://avatars.discourse-cdn.com/v4/letter/v/ee59a6/32.png) [@vishal0708gautam](https://discuss.elastic.co/u/vishal0708gautam)
#### Post date: [November 24, 2017, 11:58am UTC](https://discuss.elastic.co/t/tcp-output-hangs-while-sending-syslog/109025/1 "2017-11-24T11:58:36Z")

</div>

Hello Experts,

We facing an issue, while sending syslog event output from TCP, some times TCP hangs and then outputs the syslog event. The major problem here is that if any event comes in between for output, because TCP output is hanged, the event drops or not sent.

This behavior is happens some times more frequently

## Below is the config file used

input {

syslog {  
port =\> 1468  
}  
udp {  
port =\> 514  
type =\> syslog  
}

}

output {

tcp{  
host =\> "10.140.190.105"  
port =\> 1468

codec =\> line {  
format =\> "%{message}"  
}

}

## }

## Please also find below the logs generated while TCP hangs

[2017-11-24T08:10:34,608][WARN][logstash.outputs.tcp] tcp output exception {:host=\>"10.140.190.105", :port=\>1468, :exception=\>#\<EOFError: End of file reached\>, :backtrace=\>["org/jruby/RubyIO.java:3030:in `sysread'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-tcp-4.0.2/lib/logstash/outputs/tcp.rb:162:in`register'", "org/jruby/RubyProc.java:281:in `call'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-codec-line-3.0.4/lib/logstash/codecs/line.rb:54:in`encode'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-tcp-4.0.2/lib/logstash/outputs/tcp.rb:207:in `receive'", "/usr/share/logstash/logstash-core/lib/logstash/outputs/base.rb:92:in`multi\_receive'", "org/jruby/RubyArray.java:1613:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/outputs/base.rb:92:in`multi\_receive'", "/usr/share/logstash/logstash-core/lib/logstash/output\_delegator\_strategies/single.rb:15:in `multi_receive'", "org/jruby/ext/thread/Mutex.java:149:in`synchronize'", "/usr/share/logstash/logstash-core/lib/logstash/output\_delegator\_strategies/single.rb:14:in `multi_receive'", "/usr/share/logstash/logstash-core/lib/logstash/output_delegator.rb:49:in`multi\_receive'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:434:in `output_batch'", "org/jruby/RubyHash.java:1342:in`each'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:433:in `output_batch'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:381:in`worker\_loop'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:342:in `start\_workers'"]}

Kindly suggest the solution.

---

<div class="post-metadata">

### Author: ![guyboertje](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/guyboertje/32/31592_2.png) [@guyboertje](https://discuss.elastic.co/u/guyboertje)
#### Post date: [November 24, 2017, 12:10pm UTC](https://discuss.elastic.co/t/tcp-output-hangs-while-sending-syslog/109025/2 "2017-11-24T12:10:09Z")

</div>

see [Remove header information added by logstash](https://discuss.elastic.co/t/remove-header-information-added-by-logstash/108892/5?u=guyboertje)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 22, 2017, 12:10pm UTC](https://discuss.elastic.co/t/tcp-output-hangs-while-sending-syslog/109025/3 "2017-12-22T12:10:16Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
