# Failed to install microsoft-sentinel-logstash-output-plugin , error execution expired

**URL:** <https://discuss.elastic.co/t/failed-to-install-microsoft-sentinel-logstash-output-plugin-error-execution-expired/331085>\
**Category:** Logstash\
**Created:** [April 28, 2023, 7:21pm UTC](https://discuss.elastic.co/t/failed-to-install-microsoft-sentinel-logstash-output-plugin-error-execution-expired/331085 "2023-04-28T19:21:35Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![SAMY-ELK](https://avatars.discourse-cdn.com/v4/letter/s/e9c0ed/32.png) [@SAMY-ELK](https://discuss.elastic.co/u/SAMY-ELK)\
**Post date:** [April 28, 2023, 7:21pm UTC](https://discuss.elastic.co/t/failed-to-install-microsoft-sentinel-logstash-output-plugin-error-execution-expired/331085/1 "2023-04-28T19:21:35Z")

</div>

Hi,  
I am unable to install the microsoft-sentinel-logstash-output-plugin on logstash server.  
I am running rhel7.9.  
I get the following error : ERROR: Something went wrong when installing install, microsoft-sentinel-logstash-output-plugin, message: execution expired.

just Site ([https://rubygems.org/](https://rubygems.org/)) is autorised on server logstash  
intenet is not autorised.

Thx for help

---

<div class="post-metadata">

**Author:** ![Saud555](https://avatars.discourse-cdn.com/v4/letter/s/ac91a4/32.png) [@Saud555](https://discuss.elastic.co/u/Saud555)\
**Post date:** [May 26, 2023, 5:24pm UTC](https://discuss.elastic.co/t/failed-to-install-microsoft-sentinel-logstash-output-plugin-error-execution-expired/331085/2 "2023-05-26T17:24:37Z")

</div>

sudo /usr/share/logstash/bin/logstash-plugin install microsoft-sentinel-logstash-output-plugin

Check the status of logstash  
sudo systemctl status logstash  
take the pid and kill it  
kill -9 (pid)  
then restart logstash  
sudo systemctl restart logstash  
Then run below command  
sudo /usr/share/logstash/bin/logstash-plugin install microsoft-sentinel-logstash-output-plugin

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [May 26, 2023, 5:54pm UTC](https://discuss.elastic.co/t/failed-to-install-microsoft-sentinel-logstash-output-plugin-error-execution-expired/331085/3 "2023-05-26T17:54:47Z")

</div>

> [@SAMY-ELK](#):
>
> just Site ([https://rubygems.org/](https://rubygems.org/)) is autorised on server logstash  
> intenet is not autorised.

If the Logstash server does not have internet access, you will need to prepare a offline package of the plugin on a server that has internet access using a Logstash with the same version.

To prepare a offline package, follow this [documentation](https://www.elastic.co/guide/en/logstash/current/offline-plugins.html).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 23, 2023, 5:55pm UTC](https://discuss.elastic.co/t/failed-to-install-microsoft-sentinel-logstash-output-plugin-error-execution-expired/331085/4 "2023-06-23T17:55:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.