# Logstash cannot run config file on window

**URL:** <https://discuss.elastic.co/t/logstash-cannot-run-config-file-on-window/147922>\
**Category:** Logstash\
**Created:** [September 10, 2018, 8:55am UTC](https://discuss.elastic.co/t/logstash-cannot-run-config-file-on-window/147922 "2018-09-10T08:55:44Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![peterch](https://avatars.discourse-cdn.com/v4/letter/p/e5b9ba/32.png) [@peterch](https://discuss.elastic.co/u/peterch)\
**Post date:** [September 10, 2018, 8:55am UTC](https://discuss.elastic.co/t/logstash-cannot-run-config-file-on-window/147922/1 "2018-09-10T08:55:44Z")

</div>

Dear All,

I try to run a config file in window but fail. As the log is very long, I attach some of the log. Please advice.

2018-09-10 16:47:45,885 main ERROR Null object returned for RollingFile in Appenders.  
2018-09-10 16:47:45,885 main ERROR Null object returned for RollingFile in Appenders.  
2018-09-10 16:47:45,885 main ERROR Null object returned for RollingFile in Appenders.  
2018-09-10 16:47:45,885 main ERROR Null object returned for RollingFile in Appenders.  
2018-09-10 16:47:45,885 main ERROR Unable to locate appender "plain\_rolling" for logger config "root"  
2018-09-10 16:47:45,885 main ERROR Unable to locate appender "plain\_rolling\_slowlog" for logger config "slowlog"  
[2018-09-10T16:47:45,973][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"fb\_apache", :directory=\>"C:/ELK/logstash/modules/fb\_apache/configuration"}  
[2018-09-10T16:47:46,008][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"netflow", :directory=\>"C:/ELK/logstash/modules/netflow/configuration"}  
[2018-09-10T16:47:46,361][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified  
Configuration OK  
[2018-09-10T16:47:55,227][INFO][logstash.runner] Using config.test\_and\_exit mode. Config Validation Result: OK. Exiting Logstash

Thanks

---

<div class="post-metadata">

**Author:** ![JPelastic](https://avatars.discourse-cdn.com/v4/letter/j/9e8a1a/32.png) [@JPelastic](https://discuss.elastic.co/u/JPelastic)\
**Post date:** [September 10, 2018, 9:02am UTC](https://discuss.elastic.co/t/logstash-cannot-run-config-file-on-window/147922/2 "2018-09-10T09:02:21Z")

</div>

Hi Peterch

You're trying to run a logstash on Windows, I presume? Please read your question before posting.

Can you supply us with the config file? So we understand what it is you are trying to do. Just post it in between a series of backticks "`" (three backticks to start, three to end), so there will be markup.

Thanks

---

<div class="post-metadata">

**Author:** ![peterch](https://avatars.discourse-cdn.com/v4/letter/p/e5b9ba/32.png) [@peterch](https://discuss.elastic.co/u/peterch)\
**Post date:** [September 10, 2018, 9:32am UTC](https://discuss.elastic.co/t/logstash-cannot-run-config-file-on-window/147922/3 "2018-09-10T09:32:29Z")

</div>

Hi Johan,

sorry for the typo.

I just tried to run the command again through cmd in admin and the error are gone. It show another error. May I know how to fix it?

Error message  
C:\ELK\logstash\bin\>logstash -f "C:\ELK\logstash\config\blueliv\_free.conf"  
Sending Logstash's logs to C:/ELK/logstash/logs which is now configured via log4j2.properties  
[2018-09-10T17:27:23,664][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"fb\_apache", :directory=\>"C:/ELK/logstash/modules/fb\_apache/configuration"}  
[2018-09-10T17:27:23,729][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"netflow", :directory=\>"C:/ELK/logstash/modules/netflow/configuration"}  
[2018-09-10T17:27:24,130][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified  
[2018-09-10T17:27:24,152][FATAL][logstash.runner] Logstash could not be started because there is already another instance using the configured data directory. If you wish to run multiple in  
stances, you must change the "path.data" setting.  
[2018-09-10T17:27:24,166][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: org.jruby.exceptions.RaiseException: (SystemExit) exit

config file  
input {  
blueliv {  
api\_url =\> "[https://freeapi.blueliv.com](https://freeapi.blueliv.com)"  
http\_timeout =\> 1000  
api\_key =\> "my key"  
feeds =\> {  
"attacks" =\> {  
"active" =\> "true"  
}  
"botips" =\> {  
"active" =\> "true"  
}  
"crimeservers" =\> {  
"active" =\> "true"  
"feed\_type" =\> "recent"  
}  
"malwares" =\> {  
"active" =\> "false"  
}  
}  
}  
}  
output {  
elasticsearch {  
hosts =\> "1.1.1.1:9200"  
index =\> "blueliv-%{@collection}"  
manage\_template =\> false  
document\_id =\> "%{document\_id}"  
}  
}

Thanks

---

<div class="post-metadata">

**Author:** ![JPelastic](https://avatars.discourse-cdn.com/v4/letter/j/9e8a1a/32.png) [@JPelastic](https://discuss.elastic.co/u/JPelastic)\
**Post date:** [September 10, 2018, 9:51am UTC](https://discuss.elastic.co/t/logstash-cannot-run-config-file-on-window/147922/4 "2018-09-10T09:51:29Z")

</div>

your error says

```auto
Logstash could not be started because there is already another instance using the configured data directory. If you wish to run multiple in
stances, you must change the "path.data" setting.

```

So you already have a logstash process running. Maybe close all Java processes in process manager

---

<div class="post-metadata">

**Author:** ![peterch](https://avatars.discourse-cdn.com/v4/letter/p/e5b9ba/32.png) [@peterch](https://discuss.elastic.co/u/peterch)\
**Post date:** [September 10, 2018, 9:57am UTC](https://discuss.elastic.co/t/logstash-cannot-run-config-file-on-window/147922/5 "2018-09-10T09:57:38Z")

</div>

Hi Johan,

I am not understand. Is that mean the config file cannot run because there is already a logstash which is running logstash.yml?

Thanks

---

<div class="post-metadata">

**Author:** ![JPelastic](https://avatars.discourse-cdn.com/v4/letter/j/9e8a1a/32.png) [@JPelastic](https://discuss.elastic.co/u/JPelastic)\
**Post date:** [September 10, 2018, 10:12am UTC](https://discuss.elastic.co/t/logstash-cannot-run-config-file-on-window/147922/6 "2018-09-10T10:12:25Z")

</div>

yes it is

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 8, 2018, 10:12am UTC](https://discuss.elastic.co/t/logstash-cannot-run-config-file-on-window/147922/7 "2018-10-08T10:12:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
