C[root@ conf.d]# /usr/share/logstash/bin/logstash -f nginx.conf
WARNING: Could not find logstash.yml which is typically located in $LS_HOME/config or /etc/logstash. You can specify the path using --path.settings. Coefaults
Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs errors to the console
[WARN ] 2019-01-18 15:56:02.837 [LogStash::Runner] multilocal - Ignoring the 'pipelines.yml' file because modules or command line options are specified
[INFO ] 2019-01-18 15:56:03.258 [LogStash::Runner] runner - Starting Logstash {"logstash.version"=>"6.3.2"}
[INFO ] 2019-01-18 15:56:07.855 [Converge PipelineAction::Create] pipeline - Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>8, "pip25, "pipeline.batch.delay"=>50}
[INFO ] 2019-01-18 15:56:08.246 [[main]-pipeline-manager] elasticsearch - Elasticsearch pool URLs updated {:changes=>{:removed=>, :added=>[http://ela124.5:9200/]}}
[INFO ] 2019-01-18 15:56:08.259 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healtlastic:xxxxxx@192.168.124.5:9200/, :path=>"/"}
[WARN ] 2019-01-18 15:56:08.446 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"http://elastic:xxxxxx@192.168.124.
[INFO ] 2019-01-18 15:56:08.628 [[main]-pipeline-manager] elasticsearch - ES Output version determined {:es_version=>6}
[WARN ] 2019-01-18 15:56:08.630 [[main]-pipeline-manager] elasticsearch - Detected a 6.x and above cluster: the type event field won't be used to det_type {:es_version=>6}
[INFO ] 2019-01-18 15:56:08.651 [[main]-pipeline-manager] elasticsearch - New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=4.5:9200"]}
[INFO ] 2019-01-18 15:56:08.663 [Ruby-0-Thread-5: :1] elasticsearch - Using mapping template from {:path=>nil}
[INFO ] 2019-01-18 15:56:08.675 [Ruby-0-Thread-5: :1] elasticsearch - Attempting to install template {:manage_template=>{"template"=>"logstash-", "verngs"=>{"index.refresh_interval"=>"5s"}, "mappings"=>{"default"=>{"dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "match_mapping_typng"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, ">{"type"=>"keyword", "ignore_above"=>256}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date"}, "@version"=>{"type"=>"keyword"}, "geoip"=>{"dynamic"=>trip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}}}
[INFO ] 2019-01-18 15:56:08.783 [[main]-pipeline-manager] geoip - Using geoip database {:path=>"/opt/GeoLite2-City.mmdb"}
[INFO ] 2019-01-18 15:56:09.073 [[main]-pipeline-manager] beats - Beats inputs: Starting input listener {:address=>"0.0.0.0:8092"}
[INFO ] 2019-01-18 15:56:09.091 [Converge PipelineAction::Create] pipeline - Pipeline started successfully {:pipeline_id=>"main", :thread=>"#<Thr}
[INFO ] 2019-01-18 15:56:09.143 [[main]<beats] Server - Starting server on port: 8092
[INFO ] 2019-01-18 15:56:09.151 [Ruby-0-Thread-1: /usr/share/logstash/lib/bootstrap/environment.rb:6] agent - Pipelines running {:count=>1, :running_pion_running_pipelines=>}
[INFO ] 2019-01-18 15:56:09.333 [Api Webserver] agent - Successfully started Logstash API endpoint {:port=>9601}
[ERROR] 2019-01-18 15:56:15.414 [[main]<beats] pipeline - A plugin had an unrecoverable error. Will restart this plugin.
Pipeline_id:main
Plugin: <LogStash::Inputs::Beats port=>8092, id=>"95e40e780d0bff40c5d1874ebdff7e398d9a1c919858f8cabeb734a31bd694b1", enable_metric=>true, codec=><Log id=>"plain_88a68485-03d6-4de7-a3aa-c2f8578876a7", enable_metric=>true, charset=>"UTF-8">, host=>"0.0.0.0", ssl=>false, ssl_verify_mode=>"none", includsl_handshake_timeout=>10000, tls_min_version=>1, tls_max_version=>1.2, cipher_suites=>["TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_RSA_WITH_A"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384", "TLS_ECDHE_RSA_WITH_AES_S_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256"], client_inactivity_timeout=>60, executor_threads=>8>
Error: Address already in use
Exception: Java::JavaNet::BindException
Stack: sun.nio.ch.Net.bind0(Native Method)
sun.nio.ch.Net.bind(sun/nio/ch/Net.java:433)
sun.nio.ch.Net.bind(sun/nio/ch/Net.java:425)
sun.nio.ch.ServerSocketChannelImpl.bind(sun/nio/ch/ServerSocketChannelImpl.java:223)
io.netty.channel.socket.nio.NioServerSocketChannel.doBind(io/netty/channel/socket/nio/NioServerSocketChannel.java:128)
io.netty.channel.AbstractChannel$AbstractUnsafe.bind(io/netty/channel/AbstractChannel.java:558)
io.netty.channel.DefaultChannelPipeline$HeadContext.bind(io/netty/channel/DefaultChannelPipeline.java:1283)
io.netty.channel.AbstractChannelHandlerContext.invokeBind(io/netty/channel/AbstractChannelHandlerContext.java:501)
io.netty.channel.AbstractChannelHandlerContext.bind(io/netty/channel/AbstractChannelHandlerContext.java:486)
io.netty.channel.DefaultChannelPipeline.bind(io/netty/channel/DefaultChannelPipeline.java:989)
io.netty.channel.AbstractChannel.bind(io/netty/channel/AbstractChannel.java:254)
io.netty.bootstrap.AbstractBootstrap$2.run(io/netty/bootstrap/AbstractBootstrap.java:364)
Is there a question you have?
Error: Address already in use What is the reason?
That would suggest that another process is already using that IP and port. Are you sure there isn't another Elasticsearch running?
Address already in us
change the port of logstash
happy new year
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.