# Logstash file shutdown

**URL:** <https://discuss.elastic.co/t/logstash-file-shutdown/219369>\
**Category:** Logstash\
**Created:** [February 14, 2020, 12:57pm UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369 "2020-02-14T12:57:34Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [February 14, 2020, 12:57pm UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369/1 "2020-02-14T12:57:34Z")

</div>

Logstash file is not starting getting this error please help

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/8/b84cc481735d20bf787984a8465106edbca94844.png)

---

<div class="post-metadata">

**Author:** ![andres-perez](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andres-perez/32/136461_2.png) [@andres-perez](https://discuss.elastic.co/u/andres-perez)\
**Post date:** [February 14, 2020, 1:01pm UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369/2 "2020-02-14T13:01:03Z")

</div>

The first [FATAL] error line in your logs says that there is another instance of Logstash already running. You must stop it before starting logstash again.

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [February 17, 2020, 4:35am UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369/3 "2020-02-17T04:35:47Z")

</div>

i have restart my pc but problem is still the same

---

<div class="post-metadata">

**Author:** ![ropc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ropc/32/47022_2.png) [@ropc](https://discuss.elastic.co/u/ropc)\
**Post date:** [February 17, 2020, 5:42am UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369/4 "2020-02-17T05:42:26Z")

</div>

@Syed.Ubaid - Did you configure Logstash to [run as a Windows Service](https://www.elastic.co/guide/en/logstash/current/running-logstash-windows.html)? If so you will need to stop the respective service before you can run Logstash from the command line.

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [February 17, 2020, 5:44am UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369/5 "2020-02-17T05:44:46Z")

</div>

ok let me check i will revert you back soon

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [February 17, 2020, 5:50am UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369/6 "2020-02-17T05:50:07Z")

</div>

i have restart the service and try to run still the error is same i stop the service of logstash and trying to run but the problem still remains the same

---

<div class="post-metadata">

**Author:** ![ropc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ropc/32/47022_2.png) [@ropc](https://discuss.elastic.co/u/ropc)\
**Post date:** [February 17, 2020, 5:51am UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369/7 "2020-02-17T05:51:47Z")

</div>

@Syed.Ubaid Did you check if the Logstash Windows service is configured to restart automatically? If so, may be it is best to disable the service for the time being and you shoud be able to run Logstash from the command line.

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [February 17, 2020, 5:53am UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369/8 "2020-02-17T05:53:01Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/d/4/d4eb674767a61c52a79718ed59d60f9c895ddb4f.png) now i am stopping this service and trying to run will let you know the result

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [February 17, 2020, 5:54am UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369/9 "2020-02-17T05:54:26Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/1/c/1cc454079ef7328293070ec1993597a4c197b47e.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/5/b5a516d7e65b105ba03177adb428823fc47a7828.png)

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [February 17, 2020, 5:54am UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369/10 "2020-02-17T05:54:52Z")

</div>

i have stop this service and trying to run still same error

---

<div class="post-metadata">

**Author:** ![ropc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ropc/32/47022_2.png) [@ropc](https://discuss.elastic.co/u/ropc)\
**Post date:** [February 17, 2020, 6:17am UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369/11 "2020-02-17T06:17:18Z")

</div>

@Syed.Ubaid In a command prompt (run as administrator), could you run the following command?

`wmic process where "name='java.exe'" get ProcessID, Commandline /format:list`

Attach the results here. Thank you.

---

<div class="post-metadata">

**Author:** ![Syed.Ubaid](https://avatars.discourse-cdn.com/v4/letter/s/df705f/32.png) [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Post date:** [February 17, 2020, 6:22am UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369/12 "2020-02-17T06:22:41Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/c/a/ca6cbfab44df94b3a9592db735f795899e8379b2.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/7/2761f1f016bfb675b15bfa527ebc3b86135c0576.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/9/e970372eebcedf62df075bd4d522845cf913ef6d.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/2/02b65d97b92b61f84ba4bd7a71c54966eec67aad.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/a/ea4719e006fda6cd1cf933e876e68432cb661c56.png)

---

<div class="post-metadata">

**Author:** ![ropc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ropc/32/47022_2.png) [@ropc](https://discuss.elastic.co/u/ropc)\
**Post date:** [February 17, 2020, 6:35am UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369/13 "2020-02-17T06:35:15Z")

</div>

@Syed.Ubaid Thanks for the screenshots. There are 2 Logstash instances running from the command line:

- Process ID: 5472
- Process ID: 8564

Please check your command line prompts and stop the second Logstash instance. You can also consider using the Task Manager to kill the process directly - up to you 😉

Thank you.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 16, 2020, 6:35am UTC](https://discuss.elastic.co/t/logstash-file-shutdown/219369/14 "2020-03-16T06:35:17Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
