# Logstash output to opensearch

**URL:** <https://forum.opensearch.org/t/logstash-output-to-opensearch/11313>\
**Category:** OpenSearch\
**Tags:** troubleshoot\
**Created:** [October 24, 2022, 12:51pm UTC](https://forum.opensearch.org/t/logstash-output-to-opensearch/11313 "2022-10-24T12:51:10Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![igumeni](https://avatars.discourse-cdn.com/v4/letter/i/dec6dc/32.png) [@igumeni](https://forum.opensearch.org/u/igumeni)\
**Post date:** [October 24, 2022, 12:51pm UTC](https://forum.opensearch.org/t/logstash-output-to-opensearch/11313/1 "2022-10-24T12:51:11Z")

</div>

I’m trying to send data to Opensearch with logstash.  
I installed Opensearch 2.3.0-1 and logstash-oss-with-opensearch-output-plugin-7.16.2 .  
I configured logstash to send data to opensearch with HTTPS but I receive in logs the following error:

"  
[ERROR][logstash.javapipeline][main] Pipeline error {:pipeline\_id=\>“main”, :exception=\>#\<LogStash::ConfigurationError: **Could not connect to a compatible version of Elasticsearch** \>, :backtrace=\>[“/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.2.3-java/lib/logstash/outputs/elasticsearch/http\_client/pool.rb:247:in `block in healthcheck!'”, “org/jruby/RubyHash.java:1415:in `each’”, “/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.2.3-java/lib/logstash/outputs/elasticsearch/http\_client/pool.rb:240:in `healthcheck!'”, “/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.2.3-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:374:in `update\_urls’”, “/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.2.3-java/lib/logstash/outputs/elasticsearch/http\_client/pool.rb:89:in `update_initial_urls’”, “/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.2.3-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:83:in `start’”, “/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.2.3-java/lib/logstash/outputs/elasticsearch/http\_client.rb:359:in `build_pool’”, “/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.2.3-java/lib/logstash/outputs/elasticsearch/http_client.rb:63:in `initialize’”, “/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.2.3-java/lib/logstash/outputs/elasticsearch/http\_client\_builder.rb:106:in `create_http_client’”, “/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.2.3-java/lib/logstash/outputs/elasticsearch/http_client_builder.rb:102:in `build’”, “/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.2.3-java/lib/logstash/plugin\_mixins/elasticsearch/common.rb:34:in `build_client’”, “/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.2.3-java/lib/logstash/outputs/elasticsearch.rb:275:in `register’”, “org/logstash/config/ir/compiler/OutputStrategyExt.java:131:in `register’”, “org/logstash/config/ir/compiler/AbstractOutputDelegatorExt.java:68:in `register’”, “/usr/share/logstash/logstash-core/lib/logstash/java\_pipeline.rb:232:in `block in register_plugins’”, “org/jruby/RubyArray.java:1821:in `each’”, “/usr/share/logstash/logstash-core/lib/logstash/java\_pipeline.rb:231:in `register_plugins’”, “/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:589:in `maybe\_setup\_out\_plugins’”, “/usr/share/logstash/logstash-core/lib/logstash/java\_pipeline.rb:244:in `start_workers’”, “/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:189:in `run’”, “/usr/share/logstash/logstash-core/lib/logstash/java\_pipeline.rb:141:in `block in start’”], “pipeline.sources”=\>[“/etc/logstash/conf.d/filebeat.conf”, “/etc/logstash/conf.d/logstash.conf”, “/etc/logstash/conf.d/syslog.conf”, “/etc/logstash/conf.d/winlogbeat.conf”], :thread=\>“#\<Thread:0x11f827f8 run\>”}

"  
Looking to documentation ([Agents and ingestion tools - OpenSearch documentation](https://opensearch.org/docs/latest/clients/agents-and-ingestion-tools/index/)) it seems that logstash 7.16.2 should be compatible with Opensearch 2.x.  
Any idea?

---

<div class="post-metadata">

**Author:** ![jasonrojas](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/jasonrojas/32/4902_2.png) [@jasonrojas](https://forum.opensearch.org/u/jasonrojas)\
**Post date:** [October 24, 2022, 4:11pm UTC](https://forum.opensearch.org/t/logstash-output-to-opensearch/11313/2 "2022-10-24T16:11:24Z")

</div>

> [@igumeni](#):
>
> logstash/outputs/elasticsearch

Try using the “opensearch” output instead of elasticsearch.

---

<div class="post-metadata">

**Author:** ![igumeni](https://avatars.discourse-cdn.com/v4/letter/i/dec6dc/32.png) [@igumeni](https://forum.opensearch.org/u/igumeni)\
**Post date:** [October 25, 2022, 5:39am UTC](https://forum.opensearch.org/t/logstash-output-to-opensearch/11313/3 "2022-10-25T05:39:35Z")

</div>

Yes.  
Thank you very much.  
🙂
