# High CPU usage logstash **URL:** \ **Category:** Logstash\ **Tags:** elastic-stack-monitoring\ **Created:** [September 29, 2022, 2:30pm UTC](https://discuss.elastic.co/t/high-cpu-usage-logstash/315468 "2022-09-29T14:30:57Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![Cheroufa](https://avatars.discourse-cdn.com/v4/letter/c/ec9cab/32.png) [@Cheroufa](https://discuss.elastic.co/u/Cheroufa)\ **Post date:** [September 29, 2022, 2:30pm UTC](https://discuss.elastic.co/t/high-cpu-usage-logstash/315468/1 "2022-09-29T14:30:57Z")
Hi all, Whene i start logstash CPU usage jump to 99%, 100% and the logstash status is running but realy not started and no logs written can someone please help me to resolve this issue ? thank you. ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [September 29, 2022, 5:03pm UTC](https://discuss.elastic.co/t/high-cpu-usage-logstash/315468/2 "2022-09-29T17:03:09Z")
Starting logstash is expensive, it can burn over a minute of CPU, so 100% usage at first is normal. Does the process id of logstash keep changing, indicating that it is restarting? If not, what does the [hot threads API](https://www.elastic.co/guide/en/logstash/current/hot-threads-api.html) show? ---
**Author:** ![grfneto](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/grfneto/32/125776_2.png) [@grfneto](https://discuss.elastic.co/u/grfneto)\ **Post date:** [September 29, 2022, 5:04pm UTC](https://discuss.elastic.co/t/high-cpu-usage-logstash/315468/3 "2022-09-29T17:04:34Z")
Hi @Cheroufa What version of logstash is used? and what is the hardware configuration that you are uploading the logstash? Did you get to configure any pipeline? best regards ---
**Author:** ![Cheroufa](https://avatars.discourse-cdn.com/v4/letter/c/ec9cab/32.png) [@Cheroufa](https://discuss.elastic.co/u/Cheroufa)\ **Post date:** [September 29, 2022, 10:01pm UTC](https://discuss.elastic.co/t/high-cpu-usage-logstash/315468/4 "2022-09-29T22:01:52Z")
Yes the pid keep changing, CPU usage is 99%,100% even after starting. ---
**Author:** ![Cheroufa](https://avatars.discourse-cdn.com/v4/letter/c/ec9cab/32.png) [@Cheroufa](https://discuss.elastic.co/u/Cheroufa)\ **Post date:** [September 29, 2022, 10:05pm UTC](https://discuss.elastic.co/t/high-cpu-usage-logstash/315468/5 "2022-09-29T22:05:22Z")
logstash version : 8.0.1 hardwear : 2CPU Intel(R) Xeon(R) Platinum 8168 CPU @ 2.70GHz Ram 4g logstash don't start even with default config and CPU usage jump to 100% ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [September 29, 2022, 11:24pm UTC](https://discuss.elastic.co/t/high-cpu-usage-logstash/315468/6 "2022-09-29T23:24:13Z")
OK, so logstash is failing to start and the service manager is constantly restarting it. You will need to read the logstash logs and see what error it is getting. ---
**Author:** ![Cheroufa](https://avatars.discourse-cdn.com/v4/letter/c/ec9cab/32.png) [@Cheroufa](https://discuss.elastic.co/u/Cheroufa)\ **Post date:** [September 29, 2022, 11:42pm UTC](https://discuss.elastic.co/t/high-cpu-usage-logstash/315468/8 "2022-09-29T23:42:10Z")
No logs are written. ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [September 29, 2022, 11:47pm UTC](https://discuss.elastic.co/t/high-cpu-usage-logstash/315468/9 "2022-09-29T23:47:05Z")
What OS and service manager are you using? Where did you look for logs? ---
**Author:** ![Cheroufa](https://avatars.discourse-cdn.com/v4/letter/c/ec9cab/32.png) [@Cheroufa](https://discuss.elastic.co/u/Cheroufa)\ **Post date:** [September 29, 2022, 11:49pm UTC](https://discuss.elastic.co/t/high-cpu-usage-logstash/315468/10 "2022-09-29T23:49:29Z")
os : ubuntu path logs : /var/log/logstash/logstash-plain.log error : [2022-09-29T01:11:30,583][FATAL][org.logstash.Logstash] Logstash stopped processing because of an error: (SystemExit) exit org.jruby.exceptions.SystemExit: (SystemExit) exit at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:747) ~[jruby-complete-9.2.20.1.jar:?] at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:710) ~[jruby-complete-9.2.20.1.jar:?] at usr.share.logstash.lib.bootstrap.environment.(/usr/share/logstash/lib/bootstrap/environment.rb:94) ~[?:?] ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [September 29, 2022, 11:55pm UTC](https://discuss.elastic.co/t/high-cpu-usage-logstash/315468/11 "2022-09-29T23:55:20Z")
You need to check stdout/stderr. Try `sudo journalctl -u logstash.service` ---
**Author:** ![Cheroufa](https://avatars.discourse-cdn.com/v4/letter/c/ec9cab/32.png) [@Cheroufa](https://discuss.elastic.co/u/Cheroufa)\ **Post date:** [September 30, 2022, 3:27pm UTC](https://discuss.elastic.co/t/high-cpu-usage-logstash/315468/12 "2022-09-30T15:27:06Z")
Finally, it's an error in the configuration of the logstash.yml file, logstash can't parse it and therefore can't start. thanks @Badger for the usefull command. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 28, 2022, 3:27pm UTC](https://discuss.elastic.co/t/high-cpu-usage-logstash/315468/13 "2022-10-28T15:27:34Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.