# Logstash Bind Issue? (solved

**URL:** <https://discuss.elastic.co/t/logstash-bind-issue-solved/53222>\
**Category:** Logstash\
**Created:** [June 18, 2016, 9:16pm UTC](https://discuss.elastic.co/t/logstash-bind-issue-solved/53222 "2016-06-18T21:16:05Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![killmasta93](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/killmasta93/32/36022_2.png) [@killmasta93](https://discuss.elastic.co/u/killmasta93)\
**Post date:** [June 18, 2016, 9:16pm UTC](https://discuss.elastic.co/t/logstash-bind-issue-solved/53222/1 "2016-06-18T21:16:05Z")

</div>

Hi,  
I was wondering if someone has had this issue before?

So everything is working on my Ubuntu server 14.04 and the logs are coming in no issue there.

But when i need to check something with

`tail -f /var/log/logstash/logstash.stdout`

I get  
The error reported is:  
Address already in use - bind - Address already in use

then I thought logstash was trying to bind to the same port as kibana

so i tried

`echo manual | sudo tee /etc/init/logstash-web.override`

still no fix ☹

Thank you ![](https://us1.discourse-cdn.com/elastic/original/2X/0/05f8925773a978d32e929ec702fd709651de0029.png)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 19, 2016, 2:55am UTC](https://discuss.elastic.co/t/logstash-bind-issue-solved/53222/2 "2016-06-19T02:55:39Z")

</div>

Please don't post pictures of text, they are difficult to read and some people may not be even able to see them. 🙂

Can you show us your config? What version are you on? Is LS already running?

---

<div class="post-metadata">

**Author:** ![killmasta93](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/killmasta93/32/36022_2.png) [@killmasta93](https://discuss.elastic.co/u/killmasta93)\
**Post date:** [June 19, 2016, 5:04am UTC](https://discuss.elastic.co/t/logstash-bind-issue-solved/53222/3 "2016-06-19T05:04:50Z")

</div>

Hi,  
Thank you again for the reply, Sorry for the picture,

I am running logstash 1.4.2-1 and yes logstash is working whats odd it that everything is working but when i run the command tails shows as if theres another port I even tried changing it to 5145 while its on 5140 but nothing.

Thank you

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 19, 2016, 5:46am UTC](https://discuss.elastic.co/t/logstash-bind-issue-solved/53222/4 "2016-06-19T05:46:11Z")

</div>

That's a **really** old version, you should upgrade.

---

<div class="post-metadata">

**Author:** ![killmasta93](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/killmasta93/32/36022_2.png) [@killmasta93](https://discuss.elastic.co/u/killmasta93)\
**Post date:** [June 20, 2016, 12:55am UTC](https://discuss.elastic.co/t/logstash-bind-issue-solved/53222/5 "2016-06-20T00:55:28Z")

</div>

Thank you for the reply,

But I just updated logstash to 1.4.5-1

still the same issue any suggestions? or where should i start looking?

Thank you

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 20, 2016, 12:57am UTC](https://discuss.elastic.co/t/logstash-bind-issue-solved/53222/6 "2016-06-20T00:57:04Z")

</div>

> [@warkolm](#):
>
> Can you show us your config?

That'd help!  
Also a `ps` showing any java processes.

---

<div class="post-metadata">

**Author:** ![killmasta93](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/killmasta93/32/36022_2.png) [@killmasta93](https://discuss.elastic.co/u/killmasta93)\
**Post date:** [June 20, 2016, 1:28am UTC](https://discuss.elastic.co/t/logstash-bind-issue-solved/53222/7 "2016-06-20T01:28:18Z")

</div>

thank you again for the quick reply, so i ran

`sudo netstat -plnt | grep ':5140'`

and got

`tcp6 0 0 :::5140 :::* LISTEN 281/java`

so java for some odd reason is listening on that port odd..

Well this is my logstash config

[http://pastebin.com/JC5sdxG6](http://pastebin.com/JC5sdxG6)

Thank you

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 20, 2016, 1:34am UTC](https://discuss.elastic.co/t/logstash-bind-issue-solved/53222/8 "2016-06-20T01:34:01Z")

</div>

So what other java processes are running?

---

<div class="post-metadata">

**Author:** ![killmasta93](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/killmasta93/32/36022_2.png) [@killmasta93](https://discuss.elastic.co/u/killmasta93)\
**Post date:** [June 20, 2016, 1:41am UTC](https://discuss.elastic.co/t/logstash-bind-issue-solved/53222/9 "2016-06-20T01:41:39Z")

</div>

well I wanted to install ELK on ubuntu server 14.04 because before I had it on lubuntu I ran the same config and step which is odd... when i install java i used this command

```
sudo add-apt-repository -y ppa:webupd8team/java && sudo apt-get update && sudo apt-get -y install oracle-java7-installer;

```

And no issue there but not sure why its giving me this issue. Whats even funnier that logstash is working fine the logs but when i want to run Tail to logstash get that issue ☹ could it be something with the permissions?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 20, 2016, 1:55am UTC](https://discuss.elastic.co/t/logstash-bind-issue-solved/53222/10 "2016-06-20T01:55:24Z")

</div>

> [@warkolm](#):
>
> Also a ps showing any java processes.

See ^

---

<div class="post-metadata">

**Author:** ![killmasta93](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/killmasta93/32/36022_2.png) [@killmasta93](https://discuss.elastic.co/u/killmasta93)\
**Post date:** [June 20, 2016, 3:14am UTC](https://discuss.elastic.co/t/logstash-bind-issue-solved/53222/11 "2016-06-20T03:14:38Z")

</div>

Thank you again reply,

I ran pstree and got this

`root@ELK:~# pstree  
init─┬─acpid  
├─atd  
├─cron  
├─dbus-daemon  
├─6\*[getty]  
├─java───40\*[{java}]  
├─java───35\*[{java}]  
├─nginx───4\*[nginx]  
├─rsyslogd───3\*[{rsyslogd}]  
├─sshd───sshd───sshd───bash───sudo───bash───pstree  
├─systemd-logind  
├─systemd-udevd  
├─upstart-file-br  
├─upstart-socket-  
└─upstart-udev-br

`  
then I ran  
root@ELK:~# pgrep -fl java  
937 java  
2367 java

so I have two Javas?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 20, 2016, 3:38am UTC](https://discuss.elastic.co/t/logstash-bind-issue-solved/53222/12 "2016-06-20T03:38:07Z")

</div>

Looks like another LS instance may be running then?

---

<div class="post-metadata">

**Author:** ![killmasta93](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/killmasta93/32/36022_2.png) [@killmasta93](https://discuss.elastic.co/u/killmasta93)\
**Post date:** [June 20, 2016, 4:15am UTC](https://discuss.elastic.co/t/logstash-bind-issue-solved/53222/13 "2016-06-20T04:15:20Z")

</div>

Hi,  
Not really sure when you say LS? another service? i tried uninstalling java but no luck there either

---

<div class="post-metadata">

**Author:** ![killmasta93](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/killmasta93/32/36022_2.png) [@killmasta93](https://discuss.elastic.co/u/killmasta93)\
**Post date:** [June 28, 2016, 3:03am UTC](https://discuss.elastic.co/t/logstash-bind-issue-solved/53222/14 "2016-06-28T03:03:25Z")

</div>

I just ended up going back to lubuntu 15.04 Works flawless i tried ubuntu server 14.04 could not get it work thanks again 😄

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:50am UTC](https://discuss.elastic.co/t/logstash-bind-issue-solved/53222/15 "2017-07-06T04:50:44Z")

</div>


