Logstash 1.5.2-1 Service Stops after 15s

Elastic Stack Logstash
1

Hey Everyone !!!

Logstash service stops after 15s, kindly help...

OS: CentOS 7

Installed rpms
Elasticsearch 1.6.0
Kibana 4.1.1
Logstash 1.5.2-1
java-1.7.0-openjdk

[root@cenvm01 conf.d]# ls
01-logstash-initial.conf

[root@cenvm01 conf.d]# vim 01-logstash-initial.conf
input {
lumberjack {
port => 5000
type => "logs"
ssl_certificate => "/etc/pki/tls/certs/logstash-forwarder.crt"
ssl_key => "/etc/pki/tls/private/logstash-forwarder.key"
}
}

filter {
if [type] == "syslog" {
grok {
match => { "message" => "%{SYSLOGTIMESTAMP:syslog_timestamp} %{SYSLOGHOST:syslog_hostname} %{DATA:syslog_program}(?:[%{POSINT:syslog_pid}])?: %{GREEDYDATA:syslog_message}" }
add_field => [ "received_at", "%{@timestamp}" ]
add_field => [ "received_from", "%{host}" ]
}
syslog_pri { }
date {
match => [ "syslog_timestamp", "MMM d HH:mm:ss", "MMM dd HH:mm:ss" ]
}
}
}

output {
elasticsearch { host => localhost }
stdout { codec => rubydebug }
}

systemctl status logstash.service
â logstash.service - LSB: Starts Logstash as a daemon.
Loaded: loaded (/etc/rc.d/init.d/logstash)
Active: active (exited) since Fri 2016-09-02 16:39:13 EDT; 27min ago
Docs: man:systemd-sysv-generator(8)
Process: 56633 ExecStop=/etc/rc.d/init.d/logstash stop (code=exited, status=0/SUCCESS)
Process: 56641 ExecStart=/etc/rc.d/init.d/logstash start (code=exited, status=0/SUCCESS)

Sep 02 16:39:13 cenvm01.jungle.kvm systemd[1]: Starting LSB: Starts Logstash as a daemon....
Sep 02 16:39:13 cenvm01.jungle.kvm logstash[56641]: logstash started.
Sep 02 16:39:13 cenvm01.jungle.kvm systemd[1]: Started LSB: Starts Logstash as a daemon..

[root@cenvm01 conf.d]# more /var/log/logstash/logstash.log
{:timestamp=>"2016-09-02T16:39:29.658000-0400", :message=>"An unexpected error occurred!", :error=>#<NoMethodError: undefi
ned method close' for nil:NilClass>, :class=>"NoMethodError", :backtrace=>["/opt/logstash/vendor/bundle/jruby/1.9/gems/lo gstash-input-lumberjack-2.0.7/lib/logstash/inputs/lumberjack.rb:99:instop'", "/opt/logstash/vendor/bundle/jruby/1.9/gems
/logstash-core-2.4.0-java/lib/logstash/inputs/base.rb:83:in do_stop'", "org/jruby/RubyArray.java:1613:ineach'", "/opt/l
ogstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/pipeline.rb:385:in shutdown'", "/opt/logstash/ vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/agent.rb:413:instop_pipeline'", "/opt/logstash/vendor
/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/agent.rb:406:in shutdown_pipelines'", "org/jruby/RubyHash.ja va:1342:ineach'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/agent.rb:406:in shu tdown_pipelines'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/agent.rb:402:inshut
down'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/agent.rb:233:in execute'", "/op t/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/runner.rb:94:inrun'", "org/jruby/RubyProc.
java:281:in call'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.0-java/lib/logstash/runner.rb:99:inru
n'", "org/jruby/RubyProc.java:281:in call'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/stud-0.0.22/lib/stud/task.rb:24: ininitialize'"], :level=>:warn}

I'm very new to ELK, Kindly help me..

2

You should start by upgrading, 1.5 is really old :slight_smile: