I am using CentOS and LogStash 6.2.
I am installing the plugins the same way I have for LS 2.4 and 5.6, and those version never had issues. When I migrated to 6.x, I began to have problems with installing plugins though LS would say they were installed.
Adding plugins to your deploymentedit
The most common situation when dealing with plugin installation is when you have access to internet. Using this method, you will be able to retrieve plugins hosted on the public repository (RubyGems.org) and install on top of your Logstash installation.
bin/logstash-plugin install logstash-output-kafka
Once the plugin is successfully installed, you can start using it in your configuration file.
REF: Working with plugins | Logstash Reference [6.2] | Elastic
So, I should be installing the plugin with
/bin/logstash-plugin install logstash-filter-alter
Logstash will run fine up until it gets to code that has a downloaded filter, then it will crash saying the filter is not installed. If I comment out the downloaded filter in the filter file, LS will restart without issues.
Here is logstash saying the filter is there:
[root@elk-logstash-lab02 /]# /usr/share/logstash/bin/logstash-plugin list filter
logstash-filter-aggregate
logstash-filter-alter
logstash-filter-anonymize
logstash-filter-cidr
Here is the error:
[2018-05-16T11:05:09,854][ERROR][logstash.plugins.registry] Tried to load a plugin's code, but failed. {:exception=>#<LoadError: no such file to load -- logstash/filters/alter>, :path=>"logstash/filters/alter", :type=>"filter", :name=>"alter"}
[2018-05-16T11:05:09,859][FATAL][logstash.runner ] The given configuration is invalid. Reason: Couldn't find any filter plugin named 'alter'. Are you sure this is correct? Trying to load the alter filter plugin resulted in this error: no such file to load -- logstash/filters/alter
Very frustrating.