title: error=>"Elasticsearch Unreachable: [http://localhost:9200/][Manticore::SocketException] Connection refused (Connection refused)"}
body: <p>ELK with salesforce</p>
  
  <pre><code>URL:http://localhost:9200/&gt;, 
  :error_type=&gt;LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError,
  :error=&gt;"Elasticsearch Unreachable: [http://localhost:9200/][Manticore::SocketException] Connection refused (Connection refused)"}
  </code></pre>
  
  <p>docker-compose.yml</p>
  
  <pre><code>version: '2'
  
  services:
  
    elasticsearch:
      build: elasticsearch/
      ports:
        - "9200:9200"
        - "9300:9300"
      environment:
        ES_JAVA_OPTS: "-Xmx256m -Xms256m"
        # disable X-Pack
        # see https://www.elastic.co/guide/en/x-pack/current/xpack-settings.html
        #     https://www.elastic.co/guide/en/x-pack/current/installing-xpack.html#xpack-enabling
        xpack.security.enabled: "false"
        xpack.monitoring.enabled: "false"
        xpack.graph.enabled: "false"
        xpack.watcher.enabled: "false"
      networks:
        - elk
  
    logstash:
      build: logstash/
      volumes:
        - ./logstash/config/logstash.yml:/usr/share/logstash/config/logstash.yml
        - ./logstash/pipeline/salesforce.conf:/usr/share/logstash/pipeline/salesforce.conf
        - ./logstash/pipeline:/usr/share/logstash/pipeline
      ports:
        - "5000:5000"
      environment:
        LS_JAVA_OPTS: "-Xmx256m -Xms256m"
      networks:
        - elk
      depends_on:
        - elasticsearch
  
    kibana:
      build: kibana/
      volumes:
        - ./kibana/config/:/usr/share/kibana/config
      ports:
        - "5601:5601"
      networks:
        - elk
      depends_on:
        - elasticsearch
  
  networks:
  
    elk:
      driver: bridge
  </code></pre>
  
  <p>logstash.yml</p>
  
  <pre><code>http.host: "0.0.0.0"
  path.config: /usr/share/logstash/pipeline
  xpack.monitoring.enabled: false
  </code></pre>
  
  <p>Pipeline.conf:</p>
  
  <p>Logstash.conf:</p>
  
  <pre><code>  input {
        tcp {
           port =&gt; 5000
        }
     }
  
     output {
         elasticsearch {
            hosts =&gt;"elasticsearch:9200"
        }
     }
  </code></pre>
  
  <p>Salesforce.conf:</p>
  
  <pre><code> input {
     salesforce {
        client_id =&gt; 'XXXXXX' 
        client_secret =&gt; 'XXXXXX' 
        username =&gt; 'XXXXXXX' 
        password =&gt; 'XXXXX' 
        security_token =&gt; 'XXXXX' 
        sfdc_object_name =&gt; 'XXXXXXX' 
        use_test_sandbox =&gt; true
     }
  }
  
  
  output {
     elasticsearch {
        index =&gt; "salesforce"
        hosts =&gt; "localhost"
     }
  }
  </code></pre>
  
  <p>Error which I am getting after docker-compose.exe --verbose up</p>
  
  <pre><code> [2017-06-01T15:36:18,518][INFO ][logstash.outputs.elasticsearch] Installing elasticsearch template to _template/logstash
      [36melasticsearch_1  |[0m [2017-06-01T15:36:18,590][WARN ][o.e.d.i.m.TypeParsers    ] field [include_in_all] is deprecated, as [_all] is deprecated, and will be disallowed in 6.0, use [copy_to] instead.
      [36melasticsearch_1  |[0m [2017-06-01T15:36:18,630][WARN ][o.e.d.i.m.TypeParsers    ] field [include_in_all] is deprecated, as [_all] is deprecated, and will be disallowed in 6.0, use [copy_to] instead.
      [32mlogstash_1       |[0m [2017-06-01T15:36:18,691][INFO ][logstash.outputs.elasticsearch] New Elasticsearch output {:class=&gt;"LogStash::Outputs::ElasticSearch", :hosts=&gt;[#&lt;URI::Generic:0x43875c12 URL://elasticsearch:9200&gt;]}
      [32mlogstash_1       |[0m [2017-06-01T15:36:18,733][INFO ][logstash.outputs.elasticsearch] Elasticsearch pool URLs updated {:changes=&gt;{:removed=&gt;[], :added=&gt;[http://localhost:9200/]}}
      [32mlogstash_1       |[0m [2017-06-01T15:36:18,736][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=&gt;http://localhost:9200/, :path=&gt;"/"}
      [32mlogstash_1       |[0m [2017-06-01T15:36:18,764][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=&gt;#&lt;URI::HTTP:0x6300907a URL:http://localhost:9200/&gt;, :error_type=&gt;LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=&gt;"Elasticsearch Unreachable: [http://localhost:9200/][Manticore::SocketException] Connection refused (Connection refused)"}
      [32mlogstash_1       |[0m [2017-06-01T15:36:18,770][INFO ][logstash.outputs.elasticsearch] Using mapping template from {:path=&gt;nil}
      [32mlogstash_1       |[0m [2017-06-01T15:36:18,788][WARN ][logstash.outputs.elasticsearch] Marking url as dead. Last error: [LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError] Elasticsearch Unreachable: [http://localhost:9200/][Manticore::SocketException] Connection refused (Connection refused) {:url=&gt;http://localhost:9200/, :error_message=&gt;"Elasticsearch Unreachable: [http://localhost:9200/][Manticore::SocketException] Connection refused (Connection refused)", :error_class=&gt;"LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError"}
  ength defined in Hash. This can cause unexpected behavior when accessing the key via as a property. You can still access the key via the #[] method.
  [32mlogstash_1       |[0m W, [2017-06-01T15:36:34.472000 #1]  WARN -- : You are setting a key that conflicts with a built-in method Restforce::Mash#length defined in Hash. This can cause unexpected behavior when accessing the key via as a property. You can still access the key via the #[] method.
  [32mlogstash_1       |[0m W, [2017-06-01T15:36:34.474000 #1]  WARN -- : You are setting a key that conflicts with a built-in method Restforce::Mash#length defined in Hash. This can cause unexpected behavior when accessing the key via as a property. You can still access the key via the #[] method.
  [32mlogstash_1       |[0m W, [2017-06-01T15:36:34.476000 #1]  WARN -- : You are setting a key that conflicts with a built-in method Restforce::Mash#length defined in Hash. This can cause unexpected behavior when accessing the key via as a property. You can still access the key via the #[] method.
  [32mlogstash_1       |[0m [2017-06-01T15:36:34,489][INFO ][logstash.pipeline        ] Pipeline main started
  [32mlogstash_1       |[0m [2017-06-01T15:36:34,667][INFO ][logstash.agent           ] Successfully started Logstash API endpoint {:port=&gt;9600}
  [32mlogstash_1       |[0m [2017-06-01T15:36:35,353][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=&gt;http://localhost:9200/, :path=&gt;"/"}
  [32mlogstash_1       |[0m [2017-06-01T15:36:35,363][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=&gt;#&lt;URI::HTTP:0x6300907a URL:http://localhost:9200/&gt;, :error_type=&gt;LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=&gt;"Elasticsearch Unreachable: [http://localhost:9200/][Manticore::SocketException] Connection refused (Connection refused)"}
  [36melasticsearch_1  |[0m [2017-06-01T15:36:38,587][WARN ][o.e.d.i.m.TypeParsers    ] field [include_in_all] is deprecated, as [_all] is deprecated, and will be disallowed in 6.0, use [copy_to] instead.
  [36melasticsearch_1  |[0m [2017-06-01T15:36:38,587][WARN ][o.e.d.i.m.TypeParsers    ] field [include_in_all] is deprecated, as [_all] is deprecated, and will be disallowed in 6.0, use [copy_to] instead.
  [36melasticsearch_1  |[0m [2017-06-01T15:36:38,734][INFO ][o.e.c.m.MetaDataCreateIndexService] [faeuqd8] [logstash-2017.06.01] creating index, cause [auto(bulk api)], templates [logstash], shards [5]/[1], mappings [_default_]
  [36melasticsearch_1  |[0m [2017-06-01T15:36:38,809][WARN ][o.e.d.i.m.TypeParsers    ] field [include_in_all] is deprecated, as [_all] is deprecated, and will be disallowed in 6.0, use [copy_to] instead.
  [36melasticsearch_1  |[0m [2017-06-01T15:36:38,809][WARN ][o.e.d.i.m.TypeParsers    ] field [include_in_all] is deprecated, as [_all] is deprecated, and will be disallowed in 6.0, use [copy_to] instead.
  [36melasticsearch_1  |[0m [2017-06-01T15:36:39,517][WARN ][o.e.d.i.m.TypeParsers    ] field [include_in_all] is deprecated, as [_all] is deprecated, and will be disallowed in 6.0, use [copy_to] instead.
  [36melasticsearch_1  |[0m [2017-06-01T15:36:39,528][WARN ][o.e.d.i.m.TypeParsers    ] field [include_in_all] is deprecated, as [_all] is deprecated, and will be disallowed in 6.0, use [copy_to] instead.
  [36melasticsearch_1  |[0m [2017-06-01T15:36:39,528][WARN ][o.e.d.i.m.TypeParsers    ] field [include_in_all] is deprecated, as [_all] is deprecated, and will be disallowed in 6.0, use [copy_to] instead.
  [36melasticsearch_1  |[0m [2017-06-01T15:36:39,529][WARN ][o.e.d.i.m.TypeParsers    ] field [include_in_all] is deprecated, as [_all] is deprecated, and will be disallowed in 6.0, use [copy_to] instead.
  </code></pre>
  
  <p>I Can see the Elastic search(9200) and kibana(5601) on the browser</p>
  
  <pre><code>{
    "name" : "GIpJMg4",
    "cluster_name" : "docker-cluster",
    "cluster_uuid" : "AWfRxKkqS_-GTwlf0nRkaA",
    "version" : {
      "number" : "5.4.0",
      "build_hash" : "780f8c4",
      "build_date" : "2017-04-28T17:43:27.229Z",
      "build_snapshot" : false,
      "lucene_version" : "6.5.0"
    },
    "tagline" : "You Know, for Search"
  }
  </code></pre>