# Logstash 7.x on raspberry pi 4

**URL:** <https://discuss.elastic.co/t/logstash-7-x-on-raspberry-pi-4/205348>\
**Category:** Logstash\
**Created:** [October 26, 2019, 10:36am UTC](https://discuss.elastic.co/t/logstash-7-x-on-raspberry-pi-4/205348 "2019-10-26T10:36:38Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![wiznil](https://avatars.discourse-cdn.com/v4/letter/w/ce7236/32.png) [@wiznil](https://discuss.elastic.co/u/wiznil)\
**Post date:** [October 26, 2019, 10:36am UTC](https://discuss.elastic.co/t/logstash-7-x-on-raspberry-pi-4/205348/1 "2019-10-26T10:36:38Z")

</div>

Hi all, never had any success in getting logstash 7.x installed on raspberry pi 4, is anyone able to get it running?

Below are the steps that I have taken:

> root@wks:/# uname -a  
> Linux home-wks 4.19.57-v7l+ #1244 SMP Thu Jul 4 18:48:07 BST 2019 armv7l GNU/Linux
> 
> #prepare requisite  
> apt-get install openjdk-8-jdk -y  
> apt-get install apt-transport-https jruby -y  
> apt-get install texinfo build-essential ant git -y
> 
> update-alternative --config java  
> #choose java 8
> 
> #compile arm-linux jffi library  
> git clone [GitHub - jnr/jffi: Java Foreign Function Interface](https://github.com/jnr/jffi)  
> cd jffi/  
> ant jar
> 
> #download and install logstash  
> wget [https://artifacts.elastic.co/downloads/logstash/logstash-7.3.2.deb](https://artifacts.elastic.co/downloads/logstash/logstash-7.3.2.deb)  
> dpkg -i --force-all logstash-7.3.2.deb
> 
> #replace libjffi  
> mv /usr/share/logstash/vendor/jruby/lib/jni/arm-Linux/libjffi-1.2.so /usr/share/logstash/vendor/jruby/lib/jni/arm-Linux/libjffi-1.2.so.old  
> cp ~/jffi/build/jni/libjffi-1.2.so /usr/share/logstash/vendor/jruby/lib/jni/arm-Linux/libjffi-1.2.so
> 
> #enable logstash service  
> systemctl enable logstash  
> systemctl start logstash

> Oct 26 18:29:31 wks systemd[1]: Started logstash.  
> Oct 26 18:30:03 wks logstash[17870]: Thread.exclusive is deprecated, use Thread::Mutex  
> Oct 26 18:30:11 wks logstash[17870]: Sending Logstash logs to /var/log/logstash which is now configured via log4j2.properties  
> Oct 26 18:30:13 wks logstash[17870]: [2019-10-26T18:30:13,124][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: Logstash stopped processing because of an error: (LoadError) load error: ffi/ffi -- java.lang.NullPointerException: null  
> Oct 26 18:30:13 wks systemd[1]: logstash.service: Main process exited, code=exited, status=1/FAILURE  
> Oct 26 18:30:13 wks systemd[1]: logstash.service: Failed with result 'exit-code'.  
> Oct 26 18:30:13 wks systemd[1]: logstash.service: Service RestartSec=100ms expired, scheduling restart.  
> Oct 26 18:30:13 wks systemd[1]: logstash.service: Scheduled restart job, restart counter is at 2.  
> Oct 26 18:30:13 wks systemd[1]: Stopped logstash.

Appreciate if anyone could help, thank you!

---

<div class="post-metadata">

**Author:** ![sadoht](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sadoht/32/49309_2.png) [@sadoht](https://discuss.elastic.co/u/sadoht)\
**Post date:** [November 14, 2019, 10:35pm UTC](https://discuss.elastic.co/t/logstash-7-x-on-raspberry-pi-4/205348/2 "2019-11-14T22:35:17Z")

</div>

> [@wiznil](#):
>
> Appreciate if anyone could help, thank you!

Did you manage to fix it? I'm getting the same problem now 😢 I can't find a solution.

---

<div class="post-metadata">

**Author:** ![sadoht](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sadoht/32/49309_2.png) [@sadoht](https://discuss.elastic.co/u/sadoht)\
**Post date:** [November 16, 2019, 10:47pm UTC](https://discuss.elastic.co/t/logstash-7-x-on-raspberry-pi-4/205348/3 "2019-11-16T22:47:39Z")

</div>

@wiznil I just found a solution! This simple script made it:

> <https://gist.github.com/alexalouit/a857a6de10dfdaf7485f7c0cccadb98c>

I have now logstash 7.3.2 running in a Raspberry Pi 4 with Buster 🎉

---

<div class="post-metadata">

**Author:** ![wiznil](https://avatars.discourse-cdn.com/v4/letter/w/ce7236/32.png) [@wiznil](https://discuss.elastic.co/u/wiznil)\
**Post date:** [November 18, 2019, 2:49pm UTC](https://discuss.elastic.co/t/logstash-7-x-on-raspberry-pi-4/205348/4 "2019-11-18T14:49:35Z")

</div>

you are right! thanks so much!!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 16, 2019, 2:49pm UTC](https://discuss.elastic.co/t/logstash-7-x-on-raspberry-pi-4/205348/5 "2019-12-16T14:49:43Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.