# Logstash 1.5.4 service stopping - RHEL 6.7 **URL:** \ **Category:** Logstash\ **Created:** [August 25, 2015, 2:03pm UTC](https://discuss.elastic.co/t/logstash-1-5-4-service-stopping-rhel-6-7/28014 "2015-08-25T14:03:10Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![mbspence1969](https://avatars.discourse-cdn.com/v4/letter/m/e79b87/32.png) [@mbspence1969](https://discuss.elastic.co/u/mbspence1969)\ **Post date:** [August 25, 2015, 2:03pm UTC](https://discuss.elastic.co/t/logstash-1-5-4-service-stopping-rhel-6-7/28014/1 "2015-08-25T14:03:10Z")
I have installed logstash on a RHEL 6.7 server from RPM. When I start the service it runs for a short time and then stops. Would anyone be able to provide some advice? The error below is logged in the err file: Java HotSpot(TM) 64-Bit Server VM warning: You have loaded library /opt/logstash/vendor/bundle/jruby/1.9/gems/jruby-win32ole-0.8.5/lib/racob-x64.dll which might have disabled stack guard. The VM will try to fix the stack guard now. It's highly recommended that you fix the library with 'execstack -c ', or link it with '-z noexecstack'. LoadError: load error: win32ole/win32ole -- java.lang.UnsatisfiedLinkError: /opt/logstash/vendor/bundle/jruby/1.9/gems/jruby-win32ole-0.8.5/lib/racob-x64.dll: /opt/logstash/vendor/bundle/jruby/1.9/gems/jruby-win32ole-0.8.5/lib/racob-x64.dll: invalid ELF header (Possible cause: endianness mismatch) require at org/jruby/RubyKernel.java:1072 require at /opt/logstash/vendor/bundle/jruby/1.9/gems/polyglot-0.3.5/lib/polyglot.rb:65 (root) at /opt/logstash/vendor/bundle/jruby/1.9/gems/jruby-win32ole-0.8.5/lib/jruby-win32ole.rb:10 require at org/jruby/RubyKernel.java:1072 require at /opt/logstash/vendor/bundle/jruby/1.9/gems/polyglot-0.3.5/lib/polyglot.rb:65 (root) at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-eventlog-1.0.0-java/lib/logstash/inputs/eventlog.rb:1 register at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-eventlog-1.0.0-java/lib/logstash/inputs/eventlog.rb:36 each at org/jruby/RubyArray.java:1613 start\_inputs at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/pipeline.rb:149 start\_inputs at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/pipeline.rb:148 synchronize at org/jruby/ext/thread/Mutex.java:149 run at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/pipeline.rb:81 run at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/pipeline.rb:81 execute at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/agent.rb:155 call at org/jruby/RubyProc.java:271 run at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/runner.rb:90 call at org/jruby/RubyProc.java:271 run at /opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-1.5.4-java/lib/logstash/runner.rb:95 Thank you ---
**Author:** ![Joe\_Lawson](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joe_lawson/32/3390_2.png) [@Joe\_Lawson](https://discuss.elastic.co/u/Joe_Lawson)\ **Post date:** [August 25, 2015, 2:19pm UTC](https://discuss.elastic.co/t/logstash-1-5-4-service-stopping-rhel-6-7/28014/2 "2015-08-25T14:19:01Z")
Looks like you are trying to use a windows plugin on Linux which won't work. See [https://github.com/logstash-plugins/logstash-input-eventlog/issues/17](https://github.com/logstash-plugins/logstash-input-eventlog/issues/17) [https://github.com/elastic/logstash/issues/3747](https://github.com/elastic/logstash/issues/3747) and [https://github.com/elastic/logstash/issues/1733](https://github.com/elastic/logstash/issues/1733) ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 5:30am UTC](https://discuss.elastic.co/t/logstash-1-5-4-service-stopping-rhel-6-7/28014/3 "2017-07-06T05:30:58Z")