# Logstash container crashes with weird error

**URL:** <https://discuss.elastic.co/t/logstash-container-crashes-with-weird-error/171105>\
**Category:** Logstash\
**Tags:** docker\
**Created:** [March 6, 2019, 12:07pm UTC](https://discuss.elastic.co/t/logstash-container-crashes-with-weird-error/171105 "2019-03-06T12:07:27Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ryukote](https://avatars.discourse-cdn.com/v4/letter/r/eada6e/32.png) [@Ryukote](https://discuss.elastic.co/u/Ryukote)\
**Post date:** [March 6, 2019, 12:07pm UTC](https://discuss.elastic.co/t/logstash-container-crashes-with-weird-error/171105/1 "2019-03-06T12:07:27Z")

</div>

Hello,

I am trying to make an integration between Elasticsearch and SQL Server via Logstash.  
I have created my dockerfile for that integration where base image is logstash.  
First the error I am getting is:

> elasticsqlserver\_1 | ERROR: Unknown command '/bin/sh'  
> elasticsqlserver\_1 |  
> elasticsqlserver\_1 | See: 'bin/logstash --help'  
> elasticsqlserver\_1 | [ERROR] 2019-03-06 11:35:55.237 [main] Logstash - java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit  
> elasticsqlserver\_1 exited with code 1

When I run clean logstash container, with whoami I can see I am working as a logstash user and I can enter /bin/sh without problems.

My dockerfile looks like:

```
FROM logstash:6.5.0

#switch to root user

USER root

#arguments

ARG dbHost=foo

ARG dbName=foo

ARG dbUser=foo

ARG dbUserPassword=foo

ARG elasticHost=www.google.com

ARG dbTable=foo

ARG elasticIndex=foo

ARG shardNum=foo

ARG replicasNum=foo

#host where database is located

ENV dbHost ${dbHost}

#database name

ENV dbName ${dbName}

#database user

ENV dbUser ${dbUser}

#database user password

ENV dbUserPassword ${dbUserPassword}

#host where Elasticsearch is located

ENV elasticHost $elasticHost

#table to log

ENV dbTable ${dbTable}

#index name

ENV elasticIndex ${elasticIndex}

#number of shards

ENV shardNum ${shardNum}

#number of replicas

ENV replicasNum ${replicasNum}

RUN usermod -a -G root logstash

#copying jar for sql server into /bin/jdbc directorys

COPY ./sqljdbc42.jar /bin/jdbc/

#adding system variable CLASSPATH for sqljdbc

RUN echo 'export CLASSPATH="/bin/jdbc/sqljdbc42.jar"' &gt;&gt; /root/.bashrc

#creating Elasticsearch index for SQL Server logs

RUN echo $(curl -XPUT --silent '${elasticHost}/${elasticIndex}' -d '{"settings" : {"index" : {"number_of_shards" : ${shardNum}, "number_of_replicas" : ${replicasNum}}}}')

#setting working directory

WORKDIR /bin/jdbc

#configuring LogStash configuration file

RUN echo "input {" &gt;&gt; sql.conf

RUN echo " jdbc {" &gt;&gt; sql.conf

RUN echo " jdbc_connection_string =&gt; "jdbc:sqlserver://${dbHost};databaseName=${dbName};db_username=${dbUser};db_password=${dbUserPassword}"" &gt;&gt; sql.conf

RUN echo " jdbc_driver_class =&gt; "com.microsoft.sqlserver.jdbc.SQLServerDriver"" &gt;&gt; sql.conf

RUN echo " jdbc_user =&gt; ${dbUser}" &gt;&gt; sql.conf

RUN echo "" &gt;&gt; sql.conf

RUN echo " statement =&gt; "select * from $dbTable"" &gt;&gt; sql.conf

RUN echo " }" &gt;&gt; sql.conf

RUN echo "}" &gt;&gt; sql.conf

RUN echo "" &gt;&gt; sql.conf

RUN echo "output {" &gt;&gt; sql.conf

RUN echo " elasticsearch {" &gt;&gt; sql.conf

RUN echo " hosts =&gt; ["${elasticHost}"]" &gt;&gt; sql.conf

RUN echo " index =&gt; "${elasticIndex}"" &gt;&gt; sql.conf

RUN echo " }" &gt;&gt; sql.conf

RUN echo "}" &gt;&gt; sql.conf

RUN chown --recursive logstash /usr/share/logstash/bin/logstash

# USER logstash

ENTRYPOINT ["/usr/share/logstash/bin/logstash", "-f", "/bin/jdbc/sql.conf", "-l", "logstash.log"]

```

When I run this my container stays alive for around 30 seconds and just drop dead. I got above error with docker logs. This is as far as I can get cause I can't enter container for more debugging cause that container can't stay alive.

I don't know if that is some bug in logstash image or is this something from my side cause error message is way abstract and can't read anything useful from it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 3, 2019, 12:07pm UTC](https://discuss.elastic.co/t/logstash-container-crashes-with-weird-error/171105/2 "2019-04-03T12:07:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.