Logstash 5.2 service doesn't start

[paolo1]

Hi,

Is anyone having problems starting logstash as a service (sudo systemctl start logstash) rather than using (sudo bin/logstash --path.settings /etc/logstash)?

It works using the latter, but not the former. Output is as follows:

logstash.service - logstash
   Loaded: loaded (/etc/systemd/system/logstash.service; enabled; vendor preset: enabled)
   Active: active (running) since Tue 2017-04-11 09:29:58 UTC; 13s ago
 Main PID: 5463 (java)
    Tasks: 15
   Memory: 382.7M
      CPU: 25.110s
   CGroup: /system.slice/logstash.service
           └─5463 /usr/bin/java -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+DisableExplicitGC -Djava.awt.headless=true -Dfi

Apr 11 09:30:11 tanium-logstash-shipper logstash[5463]:         at org.jruby.Ruby.runScript(Ruby.java:850)
Apr 11 09:30:11 tanium-logstash-shipper logstash[5463]:         at org.jruby.Ruby.runNormally(Ruby.java:729)
Apr 11 09:30:11 tanium-logstash-shipper logstash[5463]:         at org.jruby.Ruby.runFromMain(Ruby.java:578)
Apr 11 09:30:11 tanium-logstash-shipper logstash[5463]:         at org.jruby.Main.doRunFromMain(Main.java:393)
Apr 11 09:30:11 tanium-logstash-shipper logstash[5463]:         at org.jruby.Main.internalRun(Main.java:288)
Apr 11 09:30:11 tanium-logstash-shipper logstash[5463]:         at org.jruby.Main.run(Main.java:217)
Apr 11 09:30:11 tanium-logstash-shipper logstash[5463]:         at org.jruby.Main.main(Main.java:197)
Apr 11 09:30:11 tanium-logstash-shipper logstash[5463]: Caused by: java.lang.IllegalStateException: ManagerFactory [org.apache.logging.log4j.core.appender.rolling.RollingFileManager$RollingFileManag
Apr 11 09:30:11 tanium-logstash-shipper logstash[5463]:         at org.apache.logging.log4j.core.appender.AbstractManager.getManager(AbstractManager.java:75)
Apr 11 09:30:11 tanium-logstash-shipper logstash[5463]:         at org.apache.logging.log4j.core.appender.OutputStreamManager.getManager(OutputStreamManager.java:81)

[warkolm (Mark Walkom)]

What's in the actual LS log?

[paolo1]

Nothing related to the constant service restart at all.

/var/log/logstash/logstash-plain.log just contains info relating to me starting it via:

bin/logstash --path.settings /etc/logstash