# What is the reason of this issue?

**URL:** <https://discuss.elastic.co/t/what-is-the-reason-of-this-issue/198495>\
**Category:** Logstash\
**Created:** [September 7, 2019, 6:41am UTC](https://discuss.elastic.co/t/what-is-the-reason-of-this-issue/198495 "2019-09-07T06:41:15Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![zero2](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zero2/32/80354_2.png) [@zero2](https://discuss.elastic.co/u/zero2)\
**Post date:** [September 7, 2019, 6:41am UTC](https://discuss.elastic.co/t/what-is-the-reason-of-this-issue/198495/1 "2019-09-07T06:41:15Z")

</div>

[2019-09-07T02:32:30,096][INFO][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck\_url=\>[http://192.168.30.31:9200/](http://192.168.30.31:9200/), :path=\>"/"}  
[2019-09-07T02:32:30,099][WARN][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>#\<URI::HTTP:0x66479443 URL:[http://192.168.30.31:9200/](http://192.168.30.31:9200/)\>, :error\_type=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :error=\>"Got response code '401' contacting Elasticsearch at URL '[http://192.168.30.31:9200/](http://192.168.30.31:9200/)'"}

---

<div class="post-metadata">

**Author:** ![pjanzen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pjanzen/32/13756_2.png) [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Post date:** [September 7, 2019, 7:29pm UTC](https://discuss.elastic.co/t/what-is-the-reason-of-this-issue/198495/2 "2019-09-07T19:29:40Z")

</div>

Looks like your Elasticsearch node / cluster is not available. That said, with this little information it is very, very hard to diagnose the problem..

To add to the question, do you have security enabled on your ES cluster? 401 is a _Unauthorized_ response so either the password is wrong or you have a other issue on your cluster.

---

<div class="post-metadata">

**Author:** ![zero2](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zero2/32/80354_2.png) [@zero2](https://discuss.elastic.co/u/zero2)\
**Post date:** [September 8, 2019, 4:38am UTC](https://discuss.elastic.co/t/what-is-the-reason-of-this-issue/198495/3 "2019-09-08T04:38:50Z")

</div>

Thanks pjanzen. It was occurred by the password .

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 6, 2019, 4:38am UTC](https://discuss.elastic.co/t/what-is-the-reason-of-this-issue/198495/4 "2019-10-06T04:38:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.