# Logstash configtest error..logstash 5.4

**URL:** <https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437>\
**Category:** Logstash\
**Created:** [June 22, 2017, 10:51am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437 "2017-06-22T10:51:59Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jonesthomas](https://avatars.discourse-cdn.com/v4/letter/j/f4b2a3/32.png) [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Post date:** [June 22, 2017, 10:51am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/1 "2017-06-22T10:51:59Z")

</div>

root@dev01:/usr/share/logstash/bin# ./logstash -configtest -e  
WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults  
ERROR: Unrecognised option '-c'

See: 'bin/logstash --help'

---

<div class="post-metadata">

**Author:** ![Vishal\_Sharma1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vishal_sharma1/32/20207_2.png) [@Vishal\_Sharma1](https://discuss.elastic.co/u/Vishal_Sharma1)\
**Post date:** [June 22, 2017, 10:53am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/2 "2017-06-22T10:53:15Z")

</div>

> [@Jonesthomas](#):
>
> ./logstash -configtest -e

Do you have a config file in /etc/logstash/conf.d ?

---

<div class="post-metadata">

**Author:** ![Jonesthomas](https://avatars.discourse-cdn.com/v4/letter/j/f4b2a3/32.png) [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Post date:** [June 22, 2017, 10:54am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/3 "2017-06-22T10:54:35Z")

</div>

Yes i have

---

<div class="post-metadata">

**Author:** ![Vishal\_Sharma1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vishal_sharma1/32/20207_2.png) [@Vishal\_Sharma1](https://discuss.elastic.co/u/Vishal_Sharma1)\
**Post date:** [June 22, 2017, 10:55am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/4 "2017-06-22T10:55:48Z")

</div>

Did you install it from source or binary?

---

<div class="post-metadata">

**Author:** ![Jonesthomas](https://avatars.discourse-cdn.com/v4/letter/j/f4b2a3/32.png) [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Post date:** [June 22, 2017, 10:59am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/5 "2017-06-22T10:59:02Z")

</div>

[https://www.elastic.co/guide/en/logstash/current/running-logstash.html](https://www.elastic.co/guide/en/logstash/current/running-logstash.html)  
i followed this doc

---

<div class="post-metadata">

**Author:** ![Vishal\_Sharma1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vishal_sharma1/32/20207_2.png) [@Vishal\_Sharma1](https://discuss.elastic.co/u/Vishal_Sharma1)\
**Post date:** [June 22, 2017, 11:00am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/6 "2017-06-22T11:00:35Z")

</div>

show me few things here please  
a) show me the output of ls /etc/logstash/conf.d  
b) show me the output of ps aux | grep logstash

---

<div class="post-metadata">

**Author:** ![Jonesthomas](https://avatars.discourse-cdn.com/v4/letter/j/f4b2a3/32.png) [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Post date:** [June 22, 2017, 11:03am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/7 "2017-06-22T11:03:00Z")

</div>

ps aux | grep logstash  
root 9005 0.0 0.0 28216 3316 pts/13 S+ 16:31 0:00 systemctl status logstash.service  
root 9211 0.0 0.0 16272 928 pts/14 S+ 16:32 0:00 grep --color=auto logstash

---

<div class="post-metadata">

**Author:** ![Vishal\_Sharma1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vishal_sharma1/32/20207_2.png) [@Vishal\_Sharma1](https://discuss.elastic.co/u/Vishal_Sharma1)\
**Post date:** [June 22, 2017, 11:03am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/8 "2017-06-22T11:03:02Z")

</div>

oh no forget about everything the command you gave is wrong, it should be  
./logstash --config -e that is '--' not '-'

---

<div class="post-metadata">

**Author:** ![Jonesthomas](https://avatars.discourse-cdn.com/v4/letter/j/f4b2a3/32.png) [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Post date:** [June 22, 2017, 11:07am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/9 "2017-06-22T11:07:56Z")

</div>

/etc/logstash/conf.d# ls  
02-beats-input.conf  
input {  
beats {  
host =\> x.x.x.33  
port =\> 5044  
ssl =\> false  
}  
log4j {  
mode =\> "server"  
host =\> x.x.x.169  
port =\> 9300  
type =\> "log4j"  
}  
}

30-elasticsearch-output.conf  
output {  
stdout{ codec =\> rubydebug }  
elasticsearch {  
host =\> ["x.x.x.33:9200"]  
sniffing =\> false  
manage\_template =\> false  
index =\> "%{[@metadata][beat]}-%{+YYYY.MM.dd}"  
document\_type =\> "%{[@metadata][type]}"  
}  
}

---

<div class="post-metadata">

**Author:** ![Jonesthomas](https://avatars.discourse-cdn.com/v4/letter/j/f4b2a3/32.png) [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Post date:** [June 22, 2017, 11:08am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/10 "2017-06-22T11:08:14Z")

</div>

no same error coming..😥

---

<div class="post-metadata">

**Author:** ![Vishal\_Sharma1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vishal_sharma1/32/20207_2.png) [@Vishal\_Sharma1](https://discuss.elastic.co/u/Vishal_Sharma1)\
**Post date:** [June 22, 2017, 11:10am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/11 "2017-06-22T11:10:36Z")

</div>

Try this

bin/logstash -f 02-beats-input.conf --config.test\_and\_exit

---

<div class="post-metadata">

**Author:** ![Jonesthomas](https://avatars.discourse-cdn.com/v4/letter/j/f4b2a3/32.png) [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Post date:** [June 22, 2017, 11:12am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/12 "2017-06-22T11:12:59Z")

</div>

root@dev01:/usr/share/logstash# bin/logstash -f 02-beats-input.conf --config.test\_and\_exit  
WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults  
Could not find log4j2 configuration at path //usr/share/logstash/config/log4j2.properties. Using default config which logs to console  
16:42:05.775 [LogStash::Runner] INFO logstash.runner - No config files found in path {:path=\>"/usr/share/logstash/02-beats-input.conf"}  
16:42:05.781 [LogStash::Runner] FATAL logstash.runner - An unexpected error occurred! {:error=\>#\<RuntimeError: No config files found: 02-beats-input.conf. Can you make sure this path is a logstash config file?\>, :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/config/loader.rb:18:in `format_config'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:257:in`execute'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:67:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:185:in`run'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:132:in `run'", "/usr/share/logstash/lib/bootstrap/environment.rb:71:in`(root)'"]}

---

<div class="post-metadata">

**Author:** ![Jonesthomas](https://avatars.discourse-cdn.com/v4/letter/j/f4b2a3/32.png) [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Post date:** [June 22, 2017, 11:17am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/13 "2017-06-22T11:17:01Z")

</div>

😓

---

<div class="post-metadata">

**Author:** ![Vishal\_Sharma1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vishal_sharma1/32/20207_2.png) [@Vishal\_Sharma1](https://discuss.elastic.co/u/Vishal_Sharma1)\
**Post date:** [June 22, 2017, 11:17am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/14 "2017-06-22T11:17:48Z")

</div>

bin/logstash --path.settings /etc/logstash -f /etc/logstash/conf.d/02-beats-input.conf --config.test\_and\_exit

This will work for sure. sorry my bad i am still using 2.4 version on some of my old servers.

---

<div class="post-metadata">

**Author:** ![Jonesthomas](https://avatars.discourse-cdn.com/v4/letter/j/f4b2a3/32.png) [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Post date:** [June 22, 2017, 11:20am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/15 "2017-06-22T11:20:06Z")

</div>

root@dev01:/usr/share/logstash# bin/logstash --path.settings /etc/logstash -f /etc/logstash/conf.d/02-beats-input.conf --config.test\_and\_exit  
Sending Logstash's logs to /var/log/logstash which is now configured via log4j2.properties

---

<div class="post-metadata">

**Author:** ![Vishal\_Sharma1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vishal_sharma1/32/20207_2.png) [@Vishal\_Sharma1](https://discuss.elastic.co/u/Vishal_Sharma1)\
**Post date:** [June 22, 2017, 11:21am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/16 "2017-06-22T11:21:58Z")

</div>

Yeah after this it should tell you something like below  
sudo bin/logstash --path.settings /etc/logstash -f /etc/logstash/conf.d/apache.conf --config.test\_and\_exit  
Sending Logstash's logs to /var/log/logstash which is now configured via log4j2.properties  
Configuration OK

---

<div class="post-metadata">

**Author:** ![Jonesthomas](https://avatars.discourse-cdn.com/v4/letter/j/f4b2a3/32.png) [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Post date:** [June 22, 2017, 11:23am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/17 "2017-06-22T11:23:40Z")

</div>

> [@Vishal\_Sharma1](#):
>
> sudo bin/logstash --path.settings /etc/logstash -f /etc/logstash/conf.d/apache.conf --config.test\_and\_exit

yeah but configuration ok dint show up

---

<div class="post-metadata">

**Author:** ![Jonesthomas](https://avatars.discourse-cdn.com/v4/letter/j/f4b2a3/32.png) [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Post date:** [June 22, 2017, 11:25am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/18 "2017-06-22T11:25:06Z")

</div>

and i cant stop logstash , if i check for logstash status this error comes

root@dev01:/usr/share/logstash# service logstash status  
● logstash.service - logstash  
Loaded: loaded (/etc/systemd/system/logstash.service; enabled; vendor preset: enabled)  
Active: failed (Result: exit-code) since Thu 2017-06-22 16:31:27 IST; 22min ago  
Process: 8918 ExecStart=/usr/share/logstash/bin/logstash -c /etc/logstash/logstash.yml (code=exited, status=143)  
Main PID: 8918 (code=exited, status=143)

Jun 22 16:31:11 dev01 systemd[1]: Started logstash.  
Jun 22 16:31:27 dev01 systemd[1]: Stopping logstash...  
Jun 22 16:31:27 dev01 systemd[1]: logstash.service: Main process exited, code=exited, status=143/n/a  
Jun 22 16:31:27 dev01 systemd[1]: Stopped logstash.  
Jun 22 16:31:27 dev01 systemd[1]: logstash.service: Unit entered failed state.  
Jun 22 16:31:27 dev01 systemd[1]: logstash.service: Failed with result 'exit-code'.

---

<div class="post-metadata">

**Author:** ![Jonesthomas](https://avatars.discourse-cdn.com/v4/letter/j/f4b2a3/32.png) [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Post date:** [June 22, 2017, 11:25am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/19 "2017-06-22T11:25:47Z")

</div>

root@dev01:/usr/share/logstash# kill -9 8918  
bash: kill: (8918) - No such process

---

<div class="post-metadata">

**Author:** ![Vishal\_Sharma1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vishal_sharma1/32/20207_2.png) [@Vishal\_Sharma1](https://discuss.elastic.co/u/Vishal_Sharma1)\
**Post date:** [June 22, 2017, 11:28am UTC](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437/20 "2017-06-22T11:28:46Z")

</div>

can you please see what's there in /var/logstash/logstash-plain.log ? paste the recent entries here please

[Next page](https://discuss.elastic.co/t/logstash-configtest-error-logstash-5-4/90437.md?page=2)
