# Erreur logstash de type A plugin had an unrecoverable eror

**URL:** <https://discuss.elastic.co/t/erreur-logstash-de-type-a-plugin-had-an-unrecoverable-eror/159566>\
**Category:** Discussions en français\
**Created:** [December 5, 2018, 3:44pm UTC](https://discuss.elastic.co/t/erreur-logstash-de-type-a-plugin-had-an-unrecoverable-eror/159566 "2018-12-05T15:44:15Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![nono](https://avatars.discourse-cdn.com/v4/letter/n/ce73a5/32.png) [@nono](https://discuss.elastic.co/u/nono)\
**Post date:** [December 5, 2018, 3:44pm UTC](https://discuss.elastic.co/t/erreur-logstash-de-type-a-plugin-had-an-unrecoverable-eror/159566/1 "2018-12-05T15:44:15Z")

</div>

J'ai démarré l'analyse de logs applicatif par un stack ELK en fin de semaine dernière. Je récupère les logs par rsync toutes les heures

Quand je consulte les logs du stack (docker-composelogs -f), pour l'analyse d'une partie des fichiers de logs récupérés par rsync, j'obtien l'erreur ci-dessous :

logstash\_seen | [2018-12-05T15:00:20,279][ERROR][logstash.pipeline] A plugin had an unrecoverable error. Will restart this plugin.  
logstash\_seen | Pipeline\_id:mon\_pipeline  
logstash\_seen | Plugin: \<LogStash::Inputs::File start\_position=\>"beginning", path=\>["/usr/share/logstash/data/file.log"], codec=\>\<LogStash::Codecs::Multiline pattern=\>"%{TIMESTAMP\_ISO8601:timestamp}", what=\>"previous", id=\>"17cbc108-e7d9-4225-9aea-4dd3d0319918", negate=\>true, enable\_metric=\>true, charset=\>"UTF-8", multiline\_tag=\>"multiline", max\_lines=\>500, max\_bytes=\>10485760\>, id=\>"01c80b892ab62340f5525cdfb1d474acf98c296d506029acc5419808d185b491", type=\>"mon\_type", sincedb\_path=\>"/dev/null", enable\_metric=\>true, stat\_interval=\>1.0, discover\_interval=\>15, sincedb\_write\_interval=\>15.0, delimiter=\>"\n", close\_older=\>3600.0, mode=\>"tail", file\_completed\_action=\>"delete", sincedb\_clean\_after=\>1209600.0, file\_chunk\_size=\>32768, file\_chunk\_count=\>140737488355327, file\_sort\_by=\>"last\_modified", file\_sort\_direction=\>"asc"\>  
logstash\_seen | Error: Permission denied - /usr/share/logstash/data/file.log  
logstash\_seen | Exception: Errno::EACCES  
logstash\_seen | Stack: org/jruby/RubyFile.java:366:in `initialize' logstash_seen | org/jruby/RubyIO.java:1154:in`open'

Pourtant, les droits sur le fichier file.log sont les suivants : -rwx-r-xrwx donc tout le monde peut lire le fichier.  
De surcroit, quand je consulte les logs sur kibana, il sont bien affichés donc logstash met bien à jour ElasticSearch.

Que se passe-t-il?

---

<div class="post-metadata">

**Author:** ![MikaMinn](https://avatars.discourse-cdn.com/v4/letter/m/eb8c5e/32.png) [@MikaMinn](https://discuss.elastic.co/u/MikaMinn)\
**Post date:** [December 10, 2018, 10:01am UTC](https://discuss.elastic.co/t/erreur-logstash-de-type-a-plugin-had-an-unrecoverable-eror/159566/3 "2018-12-10T10:01:50Z")

</div>

As tu autorisé Java à utiliser les ports "bas niveaux" ? (de 0 à 1023)

J'ai eu une erreur similaire avec l'input en syslog 🙂

---

<div class="post-metadata">

**Author:** ![nono](https://avatars.discourse-cdn.com/v4/letter/n/ce73a5/32.png) [@nono](https://discuss.elastic.co/u/nono)\
**Post date:** [December 11, 2018, 8:10am UTC](https://discuss.elastic.co/t/erreur-logstash-de-type-a-plugin-had-an-unrecoverable-eror/159566/4 "2018-12-11T08:10:09Z")

</div>

Bonjour,

A part le dimensionnement de la JVM, je n’ai rien fait de particulier.

Comment fait-on ?

---

<div class="post-metadata">

**Author:** ![MikaMinn](https://avatars.discourse-cdn.com/v4/letter/m/eb8c5e/32.png) [@MikaMinn](https://discuss.elastic.co/u/MikaMinn)\
**Post date:** [December 11, 2018, 1:00pm UTC](https://discuss.elastic.co/t/erreur-logstash-de-type-a-plugin-had-an-unrecoverable-eror/159566/5 "2018-12-11T13:00:29Z")

</div>

Avec la commande setcap , le chemin est peut être différent en fonction du client installé

`setcap cap_net_bind_service=+epi /usr/lib/jvm/java-8-oracle/jre/bin/java`

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 8, 2019, 1:00pm UTC](https://discuss.elastic.co/t/erreur-logstash-de-type-a-plugin-had-an-unrecoverable-eror/159566/6 "2019-01-08T13:00:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.