# Cannot update plugin logstash-filter-grok

**URL:** https://discuss.elastic.co/t/cannot-update-plugin-logstash-filter-grok/236388
**Category:** Logstash
**Created:** [June 9, 2020, 4:11pm UTC](https://discuss.elastic.co/t/cannot-update-plugin-logstash-filter-grok/236388 "2020-06-09T16:11:50Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![nhnicwaller](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nhnicwaller/32/37645_2.png) [@nhnicwaller](https://discuss.elastic.co/u/nhnicwaller)
#### Post date: [June 9, 2020, 4:11pm UTC](https://discuss.elastic.co/t/cannot-update-plugin-logstash-filter-grok/236388/1 "2020-06-09T16:11:50Z")

</div>

I have this command as part of my process to build a docker image for Logstash. It worked fine a month ago, and today it is failing.

```
logstash-plugin update logstash-filter-grok

```

Here's the exact error message:

```
An error occurred while installing ffi (1.13.1), and Bundler cannot continue.
Make sure that `gem install ffi -v '1.13.1'` succeeds before bundling.

```

And if I try to install ffi directly, I get this error

```
ERROR: Error installing ffi:
  ffi requires Ruby version >= 2.3.

```

But installing ffi 1.12.2 works fine.

```
Fetching: ffi-1.12.2-java.gem (100%)
Successfully installed ffi-1.12.2-java

```

Why now? Seems to be because ffi 1.13.0 was [released to RubyGems](https://rubygems.org/gems/ffi/versions) on June 1st, and this new version now requires a new version of Ruby.

How can I get logstash-plugin to update the filter-grok plugin but NOT attempt to install the latest version of `ffi`? I already tried pre-installing ffi@1.12.2 but still ended up with the same error from `logstash-plugin update`

Additional info: my docker image build is based on FROM [logstash:5.6.6](https://hub.docker.com/layers/logstash/library/logstash/5.6.6/images/sha256-c4867dd9f4381ca74f2725099c81110c98c526c7a54c656881e89e16758db20e?context=explore).

---

<div class="post-metadata">

### Author: ![nhnicwaller](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nhnicwaller/32/37645_2.png) [@nhnicwaller](https://discuss.elastic.co/u/nhnicwaller)
#### Post date: [June 10, 2020, 1:50pm UTC](https://discuss.elastic.co/t/cannot-update-plugin-logstash-filter-grok/236388/2 "2020-06-10T13:50:55Z")

</div>

Turned out to be an easy fix. I just added this line:

```
logstash-plugin install --version 4.0.1 logstash-filter-grok

```

and removed `logstash-plugin update`. Now it doesn't try to upgrade the `ffi` gem.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 8, 2020, 1:50pm UTC](https://discuss.elastic.co/t/cannot-update-plugin-logstash-filter-grok/236388/3 "2020-07-08T13:50:58Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
