{"action":"created","issue":{"url":"https://api.github.com/repos/elastic/logstash/issues/1663","labels_url":"https://api.github.com/repos/elastic/logstash/issues/1663/labels{/name}","comments_url":"https://api.github.com/repos/elastic/logstash/issues/1663/comments","events_url":"https://api.github.com/repos/elastic/logstash/issues/1663/events","html_url":"https://github.com/elastic/logstash/issues/1663","id":41133062,"number":1663,"title":"Logstash stop communicating with Elasticsearch","user":{"login":"bigbo","id":2208588,"avatar_url":"https://avatars.githubusercontent.com/u/2208588?v=3","gravatar_id":"","url":"https://api.github.com/users/bigbo","html_url":"https://github.com/bigbo","followers_url":"https://api.github.com/users/bigbo/followers","following_url":"https://api.github.com/users/bigbo/following{/other_user}","gists_url":"https://api.github.com/users/bigbo/gists{/gist_id}","starred_url":"https://api.github.com/users/bigbo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bigbo/subscriptions","organizations_url":"https://api.github.com/users/bigbo/orgs","repos_url":"https://api.github.com/users/bigbo/repos","events_url":"https://api.github.com/users/bigbo/events{/privacy}","received_events_url":"https://api.github.com/users/bigbo/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":8,"created_at":"2014-08-26T03:05:27Z","updated_at":"2015-08-07T20:59:34Z","closed_at":"2015-08-07T20:59:34Z","body":"Logstash 1.4.1(or 1.4.2) & Elasticsearch 1.1.1(or 1.3.2) on Centos 6.5 \r\nEverithing was working fine until Every morning when Logstash stop send new logs to Elasticsearch and when I stop then restart the losgstash process\r\nit reprocess a bulk of new log lines and when it start to send it to Elasticserch it start writing this message again and again\r\n\r\nmy config file:\r\n```\r\ninput {\r\n   redis \r\n    {\r\n    host => \"192.168.1.120\"\r\n    data_type =>\"list\"\r\n    port => \"6379\"\r\n    key => \"test\"\r\n    }\r\n}\r\n\r\nfilter {\r\n    grok {\r\n    match => [\"message\", \"%{TIMESTAMP_ISO8601:logtime},\\d{3} info +\"]\r\n        remove_field => \"message\"\r\n    }\r\n    date {\r\n        match => [\"logtime\", \"YY-MM-dd HH:mm:ss\"]\r\n        remove_field => \"logtime\"\r\n    }\r\n    ruby {\r\n        code => \"event['@timestamp'] = event['@timestamp'].localtime('+08:00')\"\r\n    }\r\n}\r\n\r\noutput {\r\n    elasticsearch {\r\n        host => \"10.2.22.21\"\r\n        index => \"logstash-%{+YYYY.MM.dd}\"\r\n        protocol => \"http\"\r\n        workers => 4\r\n    }\r\n```\r\n\r\nthe error:\r\n```\r\nFailed to flush outgoing items {:outgoing_count=>616, :exception=>#<RuntimeError: Non-OK response code from Elasticsearch: 404>, :backtrace=>[\"usr/bin/logstash-1.4.1/lib/logstash/outputs/elasticsearch/protocol.rb:127:in `bulk_ftw'\", \"usr/bin/logstash-1.4.1/lib/logstash/outputs/elasticsearch/protocol.rb:80:in `bulk'\", \"usr/bin/logstash-1.4.1/lib/logstash/outputs/elasticsearch.rb:321:in `flush'\", \"usr/bin/logstash-1.4.1/vendor/bundle/jruby/1.9/gems/stud-0.0.17/lib/stud/buffer.rb:219:in `buffer_flush'\", \"org/jruby/RubyHash.java:1339:in `each'\", \"usr/bin/logstash-1.4.1/vendor/bundle/jruby/1.9/gems/stud-0.0.17/lib/stud/buffer.rb:216:in `buffer_flush'\", \"usr/bin/logstash-1.4.1/vendor/bundle/jruby/1.9/gems/stud-0.0.17/lib/stud/buffer.rb:193:in `buffer_flush'\", \"usr/bin/logstash-1.4.1/vendor/bundle/jruby/1.9/gems/stud-0.0.17/lib/stud/buffer.rb:159:in `buffer_receive'\", \"usr/bin/logstash-1.4.1/lib/logstash/outputs/elasticsearch.rb:317:in `receive'\", \"usr/bin/logstash-1.4.1/lib/logstash/outputs/base.rb:86:in `handle'\", \"usr/bin/logstash-1.4.1/lib/logstash/outputs/base.rb:78:in `worker_setup'\"], :level=>:warn}\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/elastic/logstash/issues/comments/128833068","html_url":"https://github.com/elastic/logstash/issues/1663#issuecomment-128833068","issue_url":"https://api.github.com/repos/elastic/logstash/issues/1663","id":128833068,"user":{"login":"suyograo","id":1595958,"avatar_url":"https://avatars.githubusercontent.com/u/1595958?v=3","gravatar_id":"","url":"https://api.github.com/users/suyograo","html_url":"https://github.com/suyograo","followers_url":"https://api.github.com/users/suyograo/followers","following_url":"https://api.github.com/users/suyograo/following{/other_user}","gists_url":"https://api.github.com/users/suyograo/gists{/gist_id}","starred_url":"https://api.github.com/users/suyograo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/suyograo/subscriptions","organizations_url":"https://api.github.com/users/suyograo/orgs","repos_url":"https://api.github.com/users/suyograo/repos","events_url":"https://api.github.com/users/suyograo/events{/privacy}","received_events_url":"https://api.github.com/users/suyograo/received_events","type":"User","site_admin":false},"created_at":"2015-08-07T20:59:34Z","updated_at":"2015-08-07T20:59:34Z","body":"Closing this in favor of #73"}}