# I cant restart and config logstash **URL:** \ **Category:** Logstash\ **Created:** [June 23, 2018, 10:52am UTC](https://discuss.elastic.co/t/i-cant-restart-and-config-logstash/137115 "2018-06-23T10:52:34Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![NIloufarVafaei](https://avatars.discourse-cdn.com/v4/letter/n/5fc32e/32.png) [@NIloufarVafaei](https://discuss.elastic.co/u/NIloufarVafaei)\ **Post date:** [June 23, 2018, 10:52am UTC](https://discuss.elastic.co/t/i-cant-restart-and-config-logstash/137115/1 "2018-06-23T10:52:34Z")
## my logstash doesn't send data to elasticsearch and when i try restart it i get this error: ## Logstash - java.lang.IllegalStateException: org.jruby.exceptions.RaiseException: (GemspecError) There was a LoadError while loading logstash-core.gemspec: load error: psych -- java.lang.RuntimeException: BUG: we can not copy embedded jar to temp directory from /usr/share/logstash/logstash-core/logstash-core.gemspec:1:in `block in (root)' Does it try to require a relative path? That's been removed ## and also for this command i get this error: sudo chkconfig logstash on==\>Note: Forwarding request to 'systemctl enable logstash.service'. Failed to execute operation: No space left on device how can i fix that? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [June 23, 2018, 12:26pm UTC](https://discuss.elastic.co/t/i-cant-restart-and-config-logstash/137115/2 "2018-06-23T12:26:30Z")
> [@NIloufarVafaei](#): > > Failed to execute operation: No space left on device Have you run out of disk space? ---
**Author:** ![NIloufarVafaei](https://avatars.discourse-cdn.com/v4/letter/n/5fc32e/32.png) [@NIloufarVafaei](https://discuss.elastic.co/u/NIloufarVafaei)\ **Post date:** [June 23, 2018, 12:39pm UTC](https://discuss.elastic.co/t/i-cant-restart-and-config-logstash/137115/3 "2018-06-23T12:39:21Z")
yes i did ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [June 23, 2018, 12:43pm UTC](https://discuss.elastic.co/t/i-cant-restart-and-config-logstash/137115/4 "2018-06-23T12:43:34Z")
That seems to be the problem. Have you freed up space? ---
**Author:** ![NIloufarVafaei](https://avatars.discourse-cdn.com/v4/letter/n/5fc32e/32.png) [@NIloufarVafaei](https://discuss.elastic.co/u/NIloufarVafaei)\ **Post date:** [June 24, 2018, 5:12am UTC](https://discuss.elastic.co/t/i-cant-restart-and-config-logstash/137115/5 "2018-06-24T05:12:07Z")
yes i completely empty out my /tmp and also delete some old log file .what is problem? i mean , i know that logstash read log from /tmp but is there any way to set where logstash read file from? i think if i set this path to the path of log file ,may be the problem will solve. it is true? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [June 25, 2018, 6:48am UTC](https://discuss.elastic.co/t/i-cant-restart-and-config-logstash/137115/6 "2018-06-25T06:48:21Z")
I am not sure I understand. What does your config look like? ---
**Author:** ![NIloufarVafaei](https://avatars.discourse-cdn.com/v4/letter/n/5fc32e/32.png) [@NIloufarVafaei](https://discuss.elastic.co/u/NIloufarVafaei)\ **Post date:** [June 25, 2018, 7:04am UTC](https://discuss.elastic.co/t/i-cant-restart-and-config-logstash/137115/7 "2018-06-25T07:04:10Z")
it is mongoDB config : input { mongodb { uri =\> 'mongodb://boomrang' placeholder\_db\_dir =\> '/db' placeholder\_db\_name =\> 'boomrang.db' collection =\> 'wages' batch\_size =\> 5000 } } filter { mutate { remove\_field =\> ["\_id", "@version", "uid" , "token"] } } filter { date { match =\> ["logdate", "ISO8601"] } } output { elasticsearch { hosts =\> ["\*\*\*\*:9200"] index =\> "pelk" id =\> "mongo" } stdout { codec =\> rubydebug} } ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [June 25, 2018, 7:25am UTC](https://discuss.elastic.co/t/i-cant-restart-and-config-logstash/137115/8 "2018-06-25T07:25:55Z")
I have never used the MongoDB input plugin, so can not help you there. If you however specify the `id` as `mongo` in the Elasticsearch output, all documents will be indexed with this ID, which will lead to one document getting updated repeatedly. ---
**Author:** ![NIloufarVafaei](https://avatars.discourse-cdn.com/v4/letter/n/5fc32e/32.png) [@NIloufarVafaei](https://discuss.elastic.co/u/NIloufarVafaei)\ **Post date:** [June 26, 2018, 5:15am UTC](https://discuss.elastic.co/t/i-cant-restart-and-config-logstash/137115/9 "2018-06-26T05:15:53Z")
thanks for your response . some thing else, in logstash.yml has this line =\>path.data: /var/lib/logstash what exactly meaning of this line? i read the description of this line but i cannot understand it. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 24, 2018, 5:15am UTC](https://discuss.elastic.co/t/i-cant-restart-and-config-logstash/137115/10 "2018-07-24T05:15:58Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.