# filebeat/Logstash exit

**URL:** <https://discuss.elastic.co/t/filebeat-logstash-exit/286716>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [October 14, 2021, 11:51am UTC](https://discuss.elastic.co/t/filebeat-logstash-exit/286716 "2021-10-14T11:51:26Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![smam](https://avatars.discourse-cdn.com/v4/letter/s/46a35a/32.png) [@smam](https://discuss.elastic.co/u/smam)\
**Post date:** [October 14, 2021, 11:51am UTC](https://discuss.elastic.co/t/filebeat-logstash-exit/286716/1 "2021-10-14T11:51:26Z")

</div>

Hello,  
I would like to know how:

```auto
filebeat -e

```

and

```auto
/usr/share/logstash/bin/logstash

```

should exit? Because they each run for 10 minutes and before not moving further they print: starting....

Logstash start an input listener and filebeat prints:

```auto
2021-10-14T13:40:06.730+0200	INFO	[monitoring]	log/log.go:184	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cgroup":{"memory":{"id":"session-35.scope","mem":{"limit":{"bytes":9223372036854771712},"usage":{"bytes":3108339712}}}},"cpu":{"system":{"ticks":20,"time":{"ms":30}},"total":{"ticks":450,"time":{"ms":469},"value":450},"user":{"ticks":430,"time":{"ms":439}}},"handles":{"limit":{"hard":262144,"soft":1024},"open":12},"info":{"ephemeral_id":"some id","uptime":{"ms":30065},"version":"7.15.0"},"memstats":{"gc_next":19601152,"memory_alloc":16727360,"memory_sys":76039176,"memory_total":123884784,"rss":122171392},"runtime":{"goroutines":24}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"active":0},"type":"logstash"},"pipeline":{"clients":1,"events":{"active":0},"queue":{"max_events":4096}}},"registrar":{"states":{"current":0}},"system":{"cpu":{"cores":4},"load":{"1":4.08,"15":3.74,"5":3.82,"norm":{"1":1.02,"15":0.935,"5":0.955}}}}}}

```

multiple times within my runtime of 10 minutes.

Or should I just let them finish even if it takes more time?

---

<div class="post-metadata">

**Author:** ![smam](https://avatars.discourse-cdn.com/v4/letter/s/46a35a/32.png) [@smam](https://discuss.elastic.co/u/smam)\
**Post date:** [October 14, 2021, 11:51am UTC](https://discuss.elastic.co/t/filebeat-logstash-exit/286716/2 "2021-10-14T11:51:48Z")

</div>

Edit: I cancel execution after 10 minutes

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [October 14, 2021, 12:46pm UTC](https://discuss.elastic.co/t/filebeat-logstash-exit/286716/3 "2021-10-14T12:46:26Z")

</div>

It is not clear what your issue is, filebeat and logstash will keep running until you stop them.

What you are trying to do and what is not working?

---

<div class="post-metadata">

**Author:** ![smam](https://avatars.discourse-cdn.com/v4/letter/s/46a35a/32.png) [@smam](https://discuss.elastic.co/u/smam)\
**Post date:** [October 14, 2021, 12:48pm UTC](https://discuss.elastic.co/t/filebeat-logstash-exit/286716/4 "2021-10-14T12:48:53Z")

</div>

This is exactly what i wanted to know. I was curious about wether or not the input listeners are started once and are running until I stop the service or if they need to be started each time.

Thank you.

I will now try to ship data from Filebeat to Logstash and then to Elasticsearch

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 11, 2021, 2:49pm UTC](https://discuss.elastic.co/t/filebeat-logstash-exit/286716/5 "2021-11-11T14:49:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.