Failed to install microsoft-sentinel-logstash-output-plugin , error execution expired

Elastic Stack Logstash
1

Hi,
I am unable to install the microsoft-sentinel-logstash-output-plugin on logstash server.
I am running rhel7.9.
I get the following error : ERROR: Something went wrong when installing install, microsoft-sentinel-logstash-output-plugin, message: execution expired.

just Site (https://rubygems.org/) is autorised on server logstash
intenet is not autorised.

Thx for help

2

sudo /usr/share/logstash/bin/logstash-plugin install microsoft-sentinel-logstash-output-plugin

Check the status of logstash
sudo systemctl status logstash
take the pid and kill it
kill -9 (pid)
then restart logstash
sudo systemctl restart logstash
Then run below command
sudo /usr/share/logstash/bin/logstash-plugin install microsoft-sentinel-logstash-output-plugin

3

If the Logstash server does not have internet access, you will need to prepare a offline package of the plugin on a server that has internet access using a Logstash with the same version.

To prepare a offline package, follow this documentation.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.