# Logstash doesn't start **URL:** \ **Category:** Logstash\ **Created:** [June 12, 2020, 4:05pm UTC](https://discuss.elastic.co/t/logstash-doesnt-start/236919 "2020-06-12T16:05:16Z")\ **Posts on this page:** 12\ **Page:** 3
**Author:** ![ptamba](https://avatars.discourse-cdn.com/v4/letter/p/7feea3/32.png) [@ptamba](https://discuss.elastic.co/u/ptamba)\ **Post date:** [June 18, 2020, 12:31pm UTC](https://discuss.elastic.co/t/logstash-doesnt-start/236919/41 "2020-06-18T12:31:11Z")
and there is no wazuh-alerts indices are being created and updated in ES? ---
**Author:** ![Uzzi](https://avatars.discourse-cdn.com/v4/letter/u/6a8cbe/32.png) [@Uzzi](https://discuss.elastic.co/u/Uzzi)\ **Post date:** [June 18, 2020, 12:32pm UTC](https://discuss.elastic.co/t/logstash-doesnt-start/236919/42 "2020-06-18T12:32:21Z")
filebeat test output---\>dial up... ERROR dial tcp 172.16.6.95:5000: connect: connection refused ---
**Author:** ![ptamba](https://avatars.discourse-cdn.com/v4/letter/p/7feea3/32.png) [@ptamba](https://discuss.elastic.co/u/ptamba)\ **Post date:** [June 18, 2020, 12:40pm UTC](https://discuss.elastic.co/t/logstash-doesnt-start/236919/43 "2020-06-18T12:40:25Z")
but the test output is successful if you run logstash with `logstash -f /etc/logstash/conf.d/01-wazuh.conf`? what’s the content of that conf.d directory ? i don’t see any possible error with your config ---
**Author:** ![Uzzi](https://avatars.discourse-cdn.com/v4/letter/u/6a8cbe/32.png) [@Uzzi](https://discuss.elastic.co/u/Uzzi)\ **Post date:** [June 18, 2020, 12:42pm UTC](https://discuss.elastic.co/t/logstash-doesnt-start/236919/44 "2020-06-18T12:42:46Z")
> [@ptamba](#): > > logstash -f /etc/logstash/conf.d/01-wazuh.conf /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/01-wazuh.conf ---\> works fine: TLS... WARN secure connection disabled talk to server... OK ---
**Author:** ![ptamba](https://avatars.discourse-cdn.com/v4/letter/p/7feea3/32.png) [@ptamba](https://discuss.elastic.co/u/ptamba)\ **Post date:** [June 18, 2020, 12:50pm UTC](https://discuss.elastic.co/t/logstash-doesnt-start/236919/45 "2020-06-18T12:50:40Z")
what’s the content of `/etc/systemd/system/logstash.service` ---
**Author:** ![Uzzi](https://avatars.discourse-cdn.com/v4/letter/u/6a8cbe/32.png) [@Uzzi](https://discuss.elastic.co/u/Uzzi)\ **Post date:** [June 18, 2020, 1:04pm UTC](https://discuss.elastic.co/t/logstash-doesnt-start/236919/46 "2020-06-18T13:04:02Z")
> [@ptamba](#): > > /etc/systemd/system/logstash.service [https://paste.debian.net/1152679/](https://paste.debian.net/1152679/) ---
**Author:** ![ptamba](https://avatars.discourse-cdn.com/v4/letter/p/7feea3/32.png) [@ptamba](https://discuss.elastic.co/u/ptamba)\ **Post date:** [June 18, 2020, 1:13pm UTC](https://discuss.elastic.co/t/logstash-doesnt-start/236919/47 "2020-06-18T13:13:05Z")
sorry, but everything seems in order. any chance logstash user can’t read the config file ? what’s the permission of wazuh.conf ? other than that, i can’t find anything else ---
**Author:** ![Uzzi](https://avatars.discourse-cdn.com/v4/letter/u/6a8cbe/32.png) [@Uzzi](https://discuss.elastic.co/u/Uzzi)\ **Post date:** [June 18, 2020, 1:14pm UTC](https://discuss.elastic.co/t/logstash-doesnt-start/236919/48 "2020-06-18T13:14:45Z")
ls /etc/logstash drwxrwx--- 3 logstash logstash 4096 giu 12 12:35 certs drwxrwxr-x 2 logstash logstash 4096 giu 13 16:12 conf.d -rw-r--r-- 1 logstash logstash 2019 giu 16 13:29 jvm.options -rw-r--r-- 1 logstash logstash 8958 mag 28 20:38 log4j2.properties -rw-r--r-- 1 logstash logstash 342 mag 28 20:38 logstash-sample.conf -rw-r--r-- 1 logstash logstash 11929 giu 18 13:01 logstash.yml -rw-r--r-- 1 logstash logstash 285 giu 18 12:57 pipelines.yml -rw------- 1 logstash logstash 1707 giu 16 13:30 startup.options ls -la /etc/logstash/conf.d/ totale 12 drwxrwxr-x 2 logstash logstash 4096 giu 13 16:12 . drwxrwxr-x 4 logstash logstash 4096 giu 18 13:05 .. -rw-r--r-- 1 logstash logstash 519 giu 13 16:12 01-wazuh.conf ---
**Author:** ![ptamba](https://avatars.discourse-cdn.com/v4/letter/p/7feea3/32.png) [@ptamba](https://discuss.elastic.co/u/ptamba)\ **Post date:** [June 18, 2020, 1:17pm UTC](https://discuss.elastic.co/t/logstash-doesnt-start/236919/49 "2020-06-18T13:17:23Z")
yeah, i’m out of ideas. maybe someone else have any feedback ---
**Author:** ![Uzzi](https://avatars.discourse-cdn.com/v4/letter/u/6a8cbe/32.png) [@Uzzi](https://discuss.elastic.co/u/Uzzi)\ **Post date:** [June 18, 2020, 2:08pm UTC](https://discuss.elastic.co/t/logstash-doesnt-start/236919/50 "2020-06-18T14:08:56Z")
I will rebuild the whole virtual machine ---
**Author:** ![Uzzi](https://avatars.discourse-cdn.com/v4/letter/u/6a8cbe/32.png) [@Uzzi](https://discuss.elastic.co/u/Uzzi)\ **Post date:** [June 19, 2020, 6:47am UTC](https://discuss.elastic.co/t/logstash-doesnt-start/236919/51 "2020-06-19T06:47:45Z")
I'm became crazy!!!! I've installed clean logstash, modify files to elastic output. works fine! I've modify pipeline.unsafe\_shutdown: true it doesn't works again. Same old problem!!!! I don't know why!!!!!!! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 17, 2020, 6:47am UTC](https://discuss.elastic.co/t/logstash-doesnt-start/236919/52 "2020-07-17T06:47:45Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed. [Previous page](https://discuss.elastic.co/t/logstash-doesnt-start/236919.md?page=2)