# Logstash Forwarder connection refused in docker container **URL:** \ **Category:** Logstash\ **Created:** [September 16, 2015, 8:21pm UTC](https://discuss.elastic.co/t/logstash-forwarder-connection-refused-in-docker-container/29440 "2015-09-16T20:21:38Z")\ **Posts on this page:** 9\ **Page:** 2
**Author:** ![kmroz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kmroz/32/62741_2.png) [@kmroz](https://discuss.elastic.co/u/kmroz)\ **Post date:** [September 21, 2015, 6:15pm UTC](https://discuss.elastic.co/t/logstash-forwarder-connection-refused-in-docker-container/29440/22 "2015-09-21T18:15:46Z")
still haven't received updated logs. the only thing running is logstash on port 5000. there is only one file in /etc/logstash/conf.d/ which is what i showed above. all forwarder show connected to main host. ---
**Author:** ![kmroz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kmroz/32/62741_2.png) [@kmroz](https://discuss.elastic.co/u/kmroz)\ **Post date:** [September 21, 2015, 6:58pm UTC](https://discuss.elastic.co/t/logstash-forwarder-connection-refused-in-docker-container/29440/23 "2015-09-21T18:58:57Z")
i beleve it is something to do with logstash speaking with the forwarder. I ran the following command ". **/bin/logstash -f /etc/logstash/conf.d/puppetstash.conf --configtest**" at receieved a " **Configuration OK**".. after i tried to now actually run the command " **s./bin/logstash -f /etc/logstash/conf.d/puppetstash.conf**" and recieved "The error reported is: Address already in use - bind - Address already in use " .. any idea what the issue may be? ---
**Author:** ![kmroz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kmroz/32/62741_2.png) [@kmroz](https://discuss.elastic.co/u/kmroz)\ **Post date:** [September 21, 2015, 7:33pm UTC](https://discuss.elastic.co/t/logstash-forwarder-connection-refused-in-docker-container/29440/24 "2015-09-21T19:33:20Z")
or it could be the log forwarder is still not sending data? ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [September 21, 2015, 7:44pm UTC](https://discuss.elastic.co/t/logstash-forwarder-connection-refused-in-docker-container/29440/25 "2015-09-21T19:44:12Z")
> or it could be the log forwarder is still not sending data? It could be any number of things, but address the "address already in use" problem first. Starting Logstash with `--verbose` or `--debug` may give additional clues. ---
**Author:** ![kmroz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kmroz/32/62741_2.png) [@kmroz](https://discuss.elastic.co/u/kmroz)\ **Post date:** [September 21, 2015, 7:54pm UTC](https://discuss.elastic.co/t/logstash-forwarder-connection-refused-in-docker-container/29440/26 "2015-09-21T19:54:05Z")
how do i do that? ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [September 21, 2015, 7:57pm UTC](https://discuss.elastic.co/t/logstash-forwarder-connection-refused-in-docker-container/29440/27 "2015-09-21T19:57:17Z")
Add `--debug` to the Logstash command line. And again, double-check the lsof output. You either have two Logstash instances running at the same time or a single instance that tries to listed on port 5000 from two places. ---
**Author:** ![kmroz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kmroz/32/62741_2.png) [@kmroz](https://discuss.elastic.co/u/kmroz)\ **Post date:** [September 21, 2015, 8:05pm UTC](https://discuss.elastic.co/t/logstash-forwarder-connection-refused-in-docker-container/29440/28 "2015-09-21T20:05:19Z")
i got a logstash startup completed... anything i should be looking for in particular? ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [September 21, 2015, 8:30pm UTC](https://discuss.elastic.co/t/logstash-forwarder-connection-refused-in-docker-container/29440/29 "2015-09-21T20:30:40Z")
Well, you should be interested in why it seems like Logstash is trying to listen on port 5000 twice. For example, I believe Logstash dumps its configuration at the beginning. Good luck. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 5:28am UTC](https://discuss.elastic.co/t/logstash-forwarder-connection-refused-in-docker-container/29440/30 "2017-07-06T05:28:30Z")
[Previous page](https://discuss.elastic.co/t/logstash-forwarder-connection-refused-in-docker-container/29440.md?page=1)