Logstash 8.9.0

Elastic Stack Logstash
1

Please help me. I m running logstash 8.9.0. I recieve the below error in the pod logs.

[2023-09-05T16:25:32,904][ERROR][logstash.javapipeline    ][main][d9383b2c5e755b975c5f06446fd24ec66c0265c309ed53bd78ed6e05939579ec] A plugin had an unrecoverable error. Will restart this plugin.
  Pipeline_id:main
  Plugin: <LogStash::Inputs::File start_position=>"beginning", path=>["/shared/logs/.log"], codec=><LogStash::Codecs::Multiline pattern=>"^%{TIMESTAMP_ISO8601}", what=>"previous", id=>"82c9ff31-f5c8-4509-9a45-b2334b6c4fa5", max_lines=>1000, negate=>true, enable_metric=>true, charset=>"UTF-8", multiline_tag=>"multiline", max_bytes=>10485760>, id=>"d9383b2c5e755b975c5f06446fd24ec66c0265c309ed53bd78ed6e05939579ec", sincedb_path=>"/shared/logs/.sincedb", type=>"*******", enable_metric=>true, stat_interval=>1.0, discover_interval=>15, sincedb_write_interval=>15.0, delimiter=>"\n", close_older=>3600.0, mode=>"tail", file_completed_action=>"delete", sincedb_clean_after=>1209600.0, file_chunk_size=>32768, file_chunk_count=>140737488355327, file_sort_by=>"last_modified", file_sort_direction=>"asc", exit_after_read=>false, check_archive_validity=>false>
  Error: Permission denied - Permission denied
  Exception: Errno::EACCES
  Stack: org/jruby/RubyFile.java:1265:in `utime'
/usr/share/logstash/vendor/jruby/lib/ruby/stdlib/fileutils.rb:1147:in `block in touch'
org/jruby/RubyArray.java:1865:in `each'
/usr/share/logstash/vendor/jruby/lib/ruby/stdlib/fileutils.rb:1144:in `touch'

I don't see logs directory created as well.

2

Hi @ranjini,

Welcome back! You look to have an issue with permissions on the file you're trying to ingest. Can you check the permissions on the file and folder?

3

Thanks Carly. I was able to get this working after fixing the permission.

1 Like
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.