Filebeat-god does not forward SIGKILL to filebeat process

Elastic Stack Beats
1

Hello,
I have been having an issue wherein I send a SIGKILL (kill -9) to the filebeat-god process, and the child process does not receive the forwarded signal, causing it to stay alive.
I want to be able to automatically revive an abruptly downed process, so my process manager will attempt to restart the god process. This is resulting in duplicate filebeat processes.
I carried out 2 tests in which I used the filebeat-god command line startup, as well as the filebeat service startup method. All tests were run non-root:

Filebeat-god startup

$ /usr/bin/filebeat-god -r / -n -p /etc/filebeat/pid/filebeat-dwh.pid -- /usr/bin/filebeat -c /etc/filebeat/filebeat_dwh.yml
$ 
$ 
$ ps -ef | grep filebeat
7579     1  0 12:58 pts/15   00:00:00 /usr/bin/filebeat-god -r / -n -p /etc/filebeat/pid/filebeat-dwh.pid -- /usr/bin/filebeat -c /etc/filebeat/filebeat_dwh.yml
7580  7579  1 12:58 pts/15   00:00:00 /usr/bin/filebeat -c /etc/filebeat/filebeat_dwh.yml
7593  7294  0 12:58 pts/15   00:00:00 grep filebeat
$ 
$ kill -9 7579
$ 
$ /usr/bin/filebeat-god -r / -n -p /etc/filebeat/pid/filebeat-dwh.pid -- /usr/bin/filebeat -c /etc/filebeat/filebeat_dwh.yml
$ 
$ ps -ef | grep filebeat
7580     1  0 12:58 pts/15   00:00:00 **/usr/bin/filebeat -c /etc/filebeat/filebeat_dwh.yml**
7602     1  0 12:58 pts/15   00:00:00 /usr/bin/filebeat-god -r / -n -p /etc/filebeat/pid/filebeat-dwh.pid -- /usr/bin/filebeat -c /etc/filebeat/filebeat_dwh.yml
7603  7602  8 12:58 pts/15   00:00:00 **/usr/bin/filebeat -c /etc/filebeat/filebeat_dwh.yml**
7620  7294  0 12:59 pts/15   00:00:00 grep filebeat

(Using Service startup)

$ service filebeat-dwh start
                                                 [  OK  
$ ps -ef | grep filebeat
7708     1  0 13:01 pts/15   00:00:00 filebeat-god -r / -n -p /etc/filebeat/pid/filebeat-dwh.pid -- /usr/bin/filebeat -c /etc/filebeat/filebeat_dwh.yml
7709  7708  1 13:01 pts/15   00:00:00 /usr/bin/filebeat -c /etc/filebeat/filebeat_dwh.yml
7724  7294  0 13:01 pts/15   00:00:00 grep filebeat
$ 
$ kill -9 7708
$ 
$ service filebeat-dwh start
                                                 [  OK  ]
$ 
$ ps -ef | grep filebeat
7709     1  0 13:01 pts/15   00:00:00 **/usr/bin/filebeat -c /etc/filebeat/filebeat_dwh.yml**
7758     1  0 13:01 pts/15   00:00:00 filebeat-god -r / -n -p /etc/filebeat/pid/filebeat-dwh.pid -- /usr/bin/filebeat -c /etc/filebeat/filebeat_dwh.yml
7759  7758  1 13:01 pts/15   00:00:00 **/usr/bin/filebeat -c /etc/filebeat/filebeat_dwh.yml**
7782  7294  0 13:01 pts/15   00:00:00 grep filebeat

Filebeat 1.2.3
RHEL 6.3

2

This topic was automatically closed after 21 days. New replies are no longer allowed.