# Although installing logstash, I get "logstash: unrecognized service"

**URL:** <https://discuss.elastic.co/t/although-installing-logstash-i-get-logstash-unrecognized-service/76282>\
**Category:** Logstash\
**Created:** [February 23, 2017, 6:10pm UTC](https://discuss.elastic.co/t/although-installing-logstash-i-get-logstash-unrecognized-service/76282 "2017-02-23T18:10:58Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![tomer](https://avatars.discourse-cdn.com/v4/letter/t/41988e/32.png) [@tomer](https://discuss.elastic.co/u/tomer)\
**Post date:** [February 23, 2017, 6:10pm UTC](https://discuss.elastic.co/t/although-installing-logstash-i-get-logstash-unrecognized-service/76282/1 "2017-02-23T18:10:58Z")

</div>

Since I will need to install a logstash with out internet I downloaded the rpm (for version 5.2.0) and wrote "rpm -i ..." without running yum install. LogStash was installed, also after writing a test.conf I was able to run LogStash through command: " ./bin/logstash -f test.conf &". Through ps -ef | grep logstash I saw that LogStash was up.

The problem was when I pressed "service logstash status" etc. I received: " "logstash: unrecognized service".

Any help will be appreciated.

---

<div class="post-metadata">

**Author:** ![theuntergeek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/theuntergeek/32/44961_2.png) [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)\
**Post date:** [February 23, 2017, 6:43pm UTC](https://discuss.elastic.co/t/although-installing-logstash-i-get-logstash-unrecognized-service/76282/2 "2017-02-23T18:43:17Z")

</div>

You've installed Logstash on a RHEL or CentOS box, I presume. Which version?

The bottom line is that for RHEL/CentOS 6.x, Logstash is installed as an upstart service, which you can start with `initctl start logstash` (or is it `initctl logstash start`? I never can remember the order).

If you installed on a RHEL/CentOS 7.x system, Logstash will be installed as a systemd service, which you can start with `systemctl start logstash`.

`service start logstash` does not work with either, though you _can_ force install a SysV init script by running: `/usr/share/logstash/bin/system-install /etc/logstash/startup.options sysv` as root (or with `sudo`). You may still need to go through some hoops to make your system recognize it as a "service" after this. I recommend sticking with upstart/systemd.

---

<div class="post-metadata">

**Author:** ![tomer](https://avatars.discourse-cdn.com/v4/letter/t/41988e/32.png) [@tomer](https://discuss.elastic.co/u/tomer)\
**Post date:** [February 27, 2017, 7:02am UTC](https://discuss.elastic.co/t/although-installing-logstash-i-get-logstash-unrecognized-service/76282/3 "2017-02-27T07:02:28Z")

</div>

Thanks!  
This did the trick! (it is initctl start logstash at least on CentOS 6)  
Also the manual build of the service did the trick!

---

<div class="post-metadata">

**Author:** ![tomer](https://avatars.discourse-cdn.com/v4/letter/t/41988e/32.png) [@tomer](https://discuss.elastic.co/u/tomer)\
**Post date:** [March 5, 2017, 9:55am UTC](https://discuss.elastic.co/t/although-installing-logstash-i-get-logstash-unrecognized-service/76282/4 "2017-03-05T09:55:45Z")

</div>

Hi,

I know a long time passed from when you answered, but I was curios for the reasoning why by default logstash works like this?

Many Thanks,

Tomer

---

<div class="post-metadata">

**Author:** ![theuntergeek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/theuntergeek/32/44961_2.png) [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)\
**Post date:** [March 6, 2017, 1:16pm UTC](https://discuss.elastic.co/t/although-installing-logstash-i-get-logstash-unrecognized-service/76282/5 "2017-03-06T13:16:28Z")

</div>

Logstash, being Ruby/JRuby based, uses a Ruby util called `pleaserun` to detect and automagically install the proper startup files.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 3, 2017, 1:16pm UTC](https://discuss.elastic.co/t/although-installing-logstash-i-get-logstash-unrecognized-service/76282/6 "2017-04-03T13:16:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
