Is my systemctl restart logstash not working?

the messages stopped halfway. it’s not even completed. when i systemctl restart logstash, it didn’t even get restarted for some reason.

maybe logs are going to /var/log/messages instead?

okay i realised because the var directory is already full. thanks!!