# I am trying to Install SYSLOG input plugin in Logstash which I installed in EC2 Ubuntu Linux but nto able to do this

**URL:** <https://discuss.elastic.co/t/i-am-trying-to-install-syslog-input-plugin-in-logstash-which-i-installed-in-ec2-ubuntu-linux-but-nto-able-to-do-this/350443>\
**Category:** Logstash\
**Created:** [January 5, 2024, 9:35am UTC](https://discuss.elastic.co/t/i-am-trying-to-install-syslog-input-plugin-in-logstash-which-i-installed-in-ec2-ubuntu-linux-but-nto-able-to-do-this/350443 "2024-01-05T09:35:41Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Subrato1](https://avatars.discourse-cdn.com/v4/letter/s/ea5d25/32.png) [@Subrato1](https://discuss.elastic.co/u/Subrato1)\
**Post date:** [January 5, 2024, 9:35am UTC](https://discuss.elastic.co/t/i-am-trying-to-install-syslog-input-plugin-in-logstash-which-i-installed-in-ec2-ubuntu-linux-but-nto-able-to-do-this/350443/1 "2024-01-05T09:35:41Z")

</div>

Setup I followed for Installation:

```auto
Step to install :

1- Go to root : sudo su -

2- Download and install the Public Signing Key:

	wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo gpg --dearmor -o /usr/share/keyrings/elastic-keyring.gpg

3- You may need to install the apt-transport-https package on Debian before proceeding:

	sudo apt-get install apt-transport-https

4- Save the repository definition to /etc/apt/sources.list.d/elastic-8.x.list:

	echo "deb [signed-by=/usr/share/keyrings/elastic-keyring.gpg] https://artifacts.elastic.co/packages/8.x/apt stable main" | sudo tee -a /etc/apt/sources.list.d/elastic-8.x.list

5- Run sudo apt-get update and the repository is ready for use. You can install it with:

	sudo apt-get update && sudo apt-get install logstash

6- Start Logstash service :

	sudo systemctl start logstash.service

7- Check status :

	sudo service logstash status

```

Environment Setup:

```auto
Setup enviroment:

1- Location of logstash in UBUNTU:

	cd /usr/share -- here you can see logstash file.

2- Set Bin path to enviroment:

	echo 'export PATH=$PATH:/usr/share/logstash/bin' >> ~/.bashrc
	
	source ~/.bashrc

3- Install input plugin for syslog:
	
	logstash-plugin install logstash-input-syslog

```

- OPENJDK already present in my EC2 .

- When I am executing `logstash-plugin install logstash-input-syslog` command in ` /usr/share/logstash/bin` this directory , It will throw below error:

```auto
ERROR: File /usr/share/logstash/Gemfile does not exist or is not writable, aborting

```

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [January 5, 2024, 12:22pm UTC](https://discuss.elastic.co/t/i-am-trying-to-install-syslog-input-plugin-in-logstash-which-i-installed-in-ec2-ubuntu-linux-but-nto-able-to-do-this/350443/2 "2024-01-05T12:22:35Z")

</div>

Not sure what those instructions are, but regarding to Elastic tools always check the official documentation.

The `logstash-input-syslog` is bundled in Logstash, there is no need to install it as you can see in the [documentation](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-syslog.html).

Plugins that are not bundled will have an Installation section in the beginning of their documentation.

---

<div class="post-metadata">

**Author:** ![Subrato1](https://avatars.discourse-cdn.com/v4/letter/s/ea5d25/32.png) [@Subrato1](https://discuss.elastic.co/u/Subrato1)\
**Post date:** [January 8, 2024, 5:28am UTC](https://discuss.elastic.co/t/i-am-trying-to-install-syslog-input-plugin-in-logstash-which-i-installed-in-ec2-ubuntu-linux-but-nto-able-to-do-this/350443/3 "2024-01-08T05:28:18Z")

</div>

Hi @leandrojmp

I followed this URL:

[Installing Logstash | Logstash Reference [7.14] | Elastic](https://www.elastic.co/guide/en/logstash/7.14/installing-logstash.html)

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [January 8, 2024, 12:35pm UTC](https://discuss.elastic.co/t/i-am-trying-to-install-syslog-input-plugin-in-logstash-which-i-installed-in-ec2-ubuntu-linux-but-nto-able-to-do-this/350443/4 "2024-01-08T12:35:55Z")

</div>

These are generics instructions on how to install Logstash and it does not mention the need to install the syslog input plugin, it is already installed.

You may ignore this error.

What is your issue besides that?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 5, 2024, 12:36pm UTC](https://discuss.elastic.co/t/i-am-trying-to-install-syslog-input-plugin-in-logstash-which-i-installed-in-ec2-ubuntu-linux-but-nto-able-to-do-this/350443/5 "2024-02-05T12:36:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
