# How can I see what command the logstash container is running?

**URL:** <https://discuss.elastic.co/t/how-can-i-see-what-command-the-logstash-container-is-running/120930>\
**Category:** Logstash\
**Created:** [February 21, 2018, 8:19pm UTC](https://discuss.elastic.co/t/how-can-i-see-what-command-the-logstash-container-is-running/120930 "2018-02-21T20:19:39Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![red888](https://avatars.discourse-cdn.com/v4/letter/r/ecae2f/32.png) [@red888](https://discuss.elastic.co/u/red888)\
**Post date:** [February 21, 2018, 8:19pm UTC](https://discuss.elastic.co/t/how-can-i-see-what-command-the-logstash-container-is-running/120930/1 "2018-02-21T20:19:39Z")

</div>

[https://www.elastic.co/guide/en/logstash/6.2/docker-config.html](https://www.elastic.co/guide/en/logstash/6.2/docker-config.html)

I know where the container expects pipelines to be but I need to know exactly what logstash commands its running to execute them so I can debug

The Dockerfile for the container is built from templates it looks like from the github page so then how do I see what the heck this container is doing?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [February 21, 2018, 8:29pm UTC](https://discuss.elastic.co/t/how-can-i-see-what-command-the-logstash-container-is-running/120930/2 "2018-02-21T20:29:15Z")

</div>

Run `ps aux` just like you'd do to inspect a process not running inside a container? Or is Logstash shutting down so quickly that it won't get picked up by `ps`?

---

<div class="post-metadata">

**Author:** ![red888](https://avatars.discourse-cdn.com/v4/letter/r/ecae2f/32.png) [@red888](https://discuss.elastic.co/u/red888)\
**Post date:** [February 21, 2018, 8:49pm UTC](https://discuss.elastic.co/t/how-can-i-see-what-command-the-logstash-container-is-running/120930/3 "2018-02-21T20:49:42Z")

</div>

Right its shutting down immediately and the last docker log I see is:  
[2018-02-21T19:23:17,565][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600}

So no useful errors there

I tried running the container with "bash", exec-ing into it, and running **logstash -f /usr/share/logstash/pipeline/logstash.conf** directly and that works

So I don't know where the break down is

---

<div class="post-metadata">

**Author:** ![red888](https://avatars.discourse-cdn.com/v4/letter/r/ecae2f/32.png) [@red888](https://discuss.elastic.co/u/red888)\
**Post date:** [February 21, 2018, 8:57pm UTC](https://discuss.elastic.co/t/how-can-i-see-what-command-the-logstash-container-is-running/120930/4 "2018-02-21T20:57:21Z")

</div>

Ok figured it out, I had a bad ES endpoint configured.

and I can see its runnign "/usr/local/bin/docker-entrypoint"

THanks for the help!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 21, 2018, 8:57pm UTC](https://discuss.elastic.co/t/how-can-i-see-what-command-the-logstash-container-is-running/120930/5 "2018-03-21T20:57:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.