# \[HELP\]How to run multiple logstash instances

**URL:** <https://discuss.elastic.co/t/help-how-to-run-multiple-logstash-instances/99195>\
**Category:** Logstash\
**Created:** [September 2, 2017, 4:16pm UTC](https://discuss.elastic.co/t/help-how-to-run-multiple-logstash-instances/99195 "2017-09-02T16:16:14Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![fsaas](https://avatars.discourse-cdn.com/v4/letter/f/ee7513/32.png) [@fsaas](https://discuss.elastic.co/u/fsaas)\
**Post date:** [September 2, 2017, 4:16pm UTC](https://discuss.elastic.co/t/help-how-to-run-multiple-logstash-instances/99195/1 "2017-09-02T16:16:14Z")

</div>

Hi all.

I'm a beginner to logstash and I need to run multiple logstash instances.  
My logstash version is 5.5 and I followed this link. [here](https://discuss.elastic.co/t/solved-multiple-instances-for-logstash/65539/2?u=theuntergeek) and [here](https://discuss.elastic.co/t/multiple-logstash-instance-in-one-machine/96717/8)  
And the result is

1. grep -v ^# logstash.yml | grep [a-z]  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/b/cb546e2abe8627e98c0de150b32c7beacda8204a.png)
2. top  
 ![top](https://us1.discourse-cdn.com/elastic/original/3X/6/9/6971eb671c783c945aa137ae096bcae58f72df4d.PNG)

Until now, I think everything is ok. But when I tried to make index in kibana I can't make it. I think logstash isn't putting log files into elasticsearch and i can't guess what the problem is.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 2, 2017, 9:02pm UTC](https://discuss.elastic.co/t/help-how-to-run-multiple-logstash-instances/99195/2 "2017-09-02T21:02:30Z")

</div>

Please don't post pictures of text, they are difficult to read and some people may not be even able to see them.

---

<div class="post-metadata">

**Author:** ![fsaas](https://avatars.discourse-cdn.com/v4/letter/f/ee7513/32.png) [@fsaas](https://discuss.elastic.co/u/fsaas)\
**Post date:** [September 3, 2017, 1:42pm UTC](https://discuss.elastic.co/t/help-how-to-run-multiple-logstash-instances/99195/3 "2017-09-03T13:42:46Z")

</div>

Oh, I'm sorry. I'll keep in mind that.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [September 3, 2017, 6:39pm UTC](https://discuss.elastic.co/t/help-how-to-run-multiple-logstash-instances/99195/4 "2017-09-03T18:39:09Z")

</div>

Which Logstash process is responsible for talking to ES? From where does it get its data? Is the ES cluster healthy? What if you replace the elasticsearch output with another kind of output just to verify the the pipeline itself it working? These are some of the questions you should ask yourself when debugging a problem like this.

---

<div class="post-metadata">

**Author:** ![fsaas](https://avatars.discourse-cdn.com/v4/letter/f/ee7513/32.png) [@fsaas](https://discuss.elastic.co/u/fsaas)\
**Post date:** [September 4, 2017, 1:17am UTC](https://discuss.elastic.co/t/help-how-to-run-multiple-logstash-instances/99195/5 "2017-09-04T01:17:25Z")

</div>

Yeah you're totally right. I'm ashamed but it was helpful.  
And What does it mean 'Which Logstash process is responsible for talking to ES?'  
What I did was "sudo service logstash\_my start". Should there be any special logstash process for control??

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [September 4, 2017, 5:25am UTC](https://discuss.elastic.co/t/help-how-to-run-multiple-logstash-instances/99195/6 "2017-09-04T05:25:37Z")

</div>

> And What does it mean 'Which Logstash process is responsible for talking to ES?'  
> What I did was “sudo service logstash\_my start”. Should there be any special logstash process for control??

No, I just meant that you have three Logstash processes and if it's only some of them that are talking to ES then you need to make sure you look at the right instances.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 2, 2017, 5:25am UTC](https://discuss.elastic.co/t/help-how-to-run-multiple-logstash-instances/99195/7 "2017-10-02T05:25:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
