Logstash 1.5.4 service stopping - RHEL 6.7


(Mark Spence) #1

I have installed logstash on a RHEL 6.7 server from RPM. When I start the service it runs for a short time and then stops. Would anyone be able to provide some advice? The error below is logged in the err file:

Java HotSpot(TM) 64-Bit Server VM warning: You have loaded library /opt/logstash/vendor/bundle/jruby/1.9/gems/jruby-win32ole-0.8.5/lib/racob-x64.dll which might have disabled stack guard. The VM will try to fix the stack guard now.
It's highly recommended that you fix the library with 'execstack -c ', or link it with '-z noexecstack'.
LoadError: load error: win32ole/win32ole -- java.lang.UnsatisfiedLinkError: /opt/logstash/vendor/bundle/jruby/1.9/gems/jruby-win32ole-0.8.5/lib/racob-x64.dll: /opt/logstash/vendor/bundle/jruby/1.9/gems/jruby-win32ole-0.8.5/lib/racob-x64.dll: invalid ELF header (Possible cause: endianness mismatch)
require at org/jruby/RubyKernel.java:1072
require at /opt/logstash/vendor/bundle/jruby/1.9/gems/polyglot-0.3.5/lib/polyglot.rb:65
(root) at /opt/logstash/vendor/bundle/jruby/1.9/gems/jruby-win32ole-0.8.5/lib/jruby-win32ole.rb:10
require at org/jruby/RubyKernel.java:1072
require at /opt/logstash/vendor/bundle/jruby/1.9/gems/polyglot-0.3.5/lib/polyglot.rb:65
(root) at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-eventlog-1.0.0-java/lib/logstash/inputs/eventlog.rb:1
register at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-eventlog-1.0.0-java/lib/logstash/inputs/eventlog.rb:36
each at org/jruby/RubyArray.java:1613
start_inputs at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/pipeline.rb:149
start_inputs at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/pipeline.rb:148
synchronize at org/jruby/ext/thread/Mutex.java:149
run at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/pipeline.rb:81
run at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/pipeline.rb:81
execute at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/agent.rb:155
call at org/jruby/RubyProc.java:271
run at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/runner.rb:90
call at org/jruby/RubyProc.java:271
run at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/runner.rb:95

Thank you


(Joe Lawson) #2

Looks like you are trying to use a windows plugin on Linux which won't work.

See https://github.com/logstash-plugins/logstash-input-eventlog/issues/17
https://github.com/elastic/logstash/issues/3747 and
https://github.com/elastic/logstash/issues/1733


(system) #3