# \[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Marking url as dead **URL:** \ **Category:** Logstash\ **Created:** [December 5, 2020, 8:17pm UTC](https://discuss.elastic.co/t/warn-logstash-outputs-elasticsearch-main-marking-url-as-dead/257752 "2020-12-05T20:17:51Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Cristiane\_Marcarini](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cristiane_marcarini/32/79393_2.png) [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\ **Post date:** [December 5, 2020, 8:17pm UTC](https://discuss.elastic.co/t/warn-logstash-outputs-elasticsearch-main-marking-url-as-dead/257752/1 "2020-12-05T20:17:51Z")
What can I do in these situations? because the logs go up, but they don't appear in the kibana. [2020-12-05T20:11:29,881][WARN][logstash.outputs.elasticsearch][main] Marking url as dead. Last error: [LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError] Elasticsearch Unreachable: [[http://localhost:9201/](http://localhost:9201/)][Manticore::SocketTimeout] Read timed out {:url=\>[http://localhost:9201/](http://localhost:9201/), :error\_message=\>"Elasticsearch Unreachable: [[http://localhost:9201/](http://localhost:9201/)][Manticore::SocketTimeout] Read timed out", :error\_class=\>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError"} [2020-12-05T20:11:29,881][ERROR][logstash.outputs.elasticsearch][main] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error\_message=\>"Elasticsearch Unreachable: [[http://localhost:9201/](http://localhost:9201/)][Manticore::SocketTimeout] Read timed out", :class=\>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError", :will\_retry\_in\_seconds=\>64} [2020-12-05T20:11:32,553][WARN][logstash.outputs.elasticsearch][main] Restored connection to ES instance {:url=\>"[http://localhost:9201/](http://localhost:9201/)"} [2020-12-05T20:13:33,899][WARN][logstash.outputs.elasticsearch][main] Marking url as dead. Last error: [LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError] Elasticsearch Unreachable: [[http://localhost:9201/](http://localhost:9201/)][Manticore::SocketTimeout] Read timed out {:url=\>[http://localhost:9201/](http://localhost:9201/), :error\_message=\>"Elasticsearch Unreachable: [[http://localhost:9201/](http://localhost:9201/)][Manticore::SocketTimeout] Read timed out", :error\_class=\>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError"} [2020-12-05T20:13:33,899][WARN][logstash.outputs.elasticsearch][main] Marking url as dead. Last error: [LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError] Elasticsearch Unreachable: [[http://localhost:9201/](http://localhost:9201/)][Manticore::SocketTimeout] Read timed out {:url=\>[http://localhost:9201/](http://localhost:9201/), :error\_message=\>"Elasticsearch Unreachable: [[http://localhost:9201/](http://localhost:9201/)][Manticore::SocketTimeout] Read timed out", :error\_class=\>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError"} [2020-12-05T20:13:33,899][WARN][logstash.outputs.elasticsearch][main] Marking url as dead. Last error: [LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError] Elasticsearch Unreachable: [[http://localhost:9201/](http://localhost:9201/)][Manticore::SocketTimeout] Read timed out {:url=\>[http://localhost:9201/](http://localhost:9201/), :error\_message=\>"Elasticsearch Unreachable: [[http://localhost:9201/](http://localhost:9201/)][Manticore::SocketTimeout] Read timed out", :error\_class=\>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError"} [2020-12-05T20:13:33,899][WARN][logstash.outputs.elasticsearch][main] Marking url as dead. Last error: [LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError] Elasticsearch Unreachable: [[http://localhost:9201/](http://localhost:9201/)][Manticore::SocketTimeout] Read timed out {:url=\>[http://localhost:9201/](http://localhost:9201/), :error\_message=\>"Elasticsearch Unreachable: [[http://localhost:9201/](http://localhost:9201/)][Manticore::SocketTimeout] Read timed out", :error\_class=\>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError"} [2020-12-05T20:13:33,899][ERROR][logstash.outputs.elasticsearch][main] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error\_message=\>"Elasticsearch Unreachable: [[http://localhost:9201/](http://localhost:9201/)][Manticore::SocketTimeout] Read timed out", :class=\>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError", :will\_retry\_in\_seconds=\>64} [2020-12-05T20:13:33,899][ERROR][logstash.outputs.elasticsearch][main] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error\_message=\>"Elasticsearch Unreachable: [[http://localhost:9201/](http://localhost:9201/)][Manticore::SocketTimeout] Read timed out", :class=\>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError", :will\_retry\_in\_seconds=\>64} [2020-12-05T20:13:33,899][ERROR][logstash.outputs.elasticsearch][main] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error\_message=\>"Elasticsearch Unreachable: [[http://localhost:9201/](http://localhost:9201/)][Manticore::SocketTimeout] Read timed out", :class=\>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError", :will\_retry\_in\_seconds=\>64} [2020-12-05T20:13:33,899][ERROR][logstash.outputs.elasticsearch][main] Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down! {:error\_message=\>"Elasticsearch Unreachable: [[http://localhost:9201/](http://localhost:9201/)][Manticore::SocketTimeout] Read timed out", :class=\>"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError", :will\_retry\_in\_seconds=\>64} [2020-12-05T20:13:34,086][WARN][logstash.outputs.elasticsearch][main] Restored connection to ES instance {:url=\>"[http://localhost:9201/](http://localhost:9201/)"} ---
**Author:** ![rugenl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rugenl/32/12887_2.png) [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Post date:** [December 5, 2020, 11:40pm UTC](https://discuss.elastic.co/t/warn-logstash-outputs-elasticsearch-main-marking-url-as-dead/257752/2 "2020-12-05T23:40:46Z")
Are you using persistent logstash queues? If so, the events should be stored for the 2 minute outage and then be sent. This could be a network problem between Logstash and elastic. What is between logstash and elastic? We see these frequently on our remote logstash servers (100+ miles), but rarely on our local ones. We use persistent logstash queues. It could be some kind of temporary delay in Elasticsearch. Check the elastic logs at the time. ---
**Author:** ![Cristiane\_Marcarini](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cristiane_marcarini/32/79393_2.png) [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\ **Post date:** [December 6, 2020, 10:01am UTC](https://discuss.elastic.co/t/warn-logstash-outputs-elasticsearch-main-marking-url-as-dead/257752/3 "2020-12-06T10:01:49Z")
How can do this? Please. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 3, 2021, 10:01am UTC](https://discuss.elastic.co/t/warn-logstash-outputs-elasticsearch-main-marking-url-as-dead/257752/4 "2021-01-03T10:01:57Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.