# Logstash-input-wmi error in logs

**URL:** <https://discuss.elastic.co/t/logstash-input-wmi-error-in-logs/246796>\
**Category:** Logstash\
**Created:** [August 28, 2020, 4:55pm UTC](https://discuss.elastic.co/t/logstash-input-wmi-error-in-logs/246796 "2020-08-28T16:55:48Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Adriann](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adriann/32/77780_2.png) [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Post date:** [August 28, 2020, 4:55pm UTC](https://discuss.elastic.co/t/logstash-input-wmi-error-in-logs/246796/1 "2020-08-28T16:55:48Z")

</div>

Hello,

I installed logstash-wmi plugin into my logstash installation 7.8 using logstash executable and command install.

I am not able to move forward with my configuration becouse of "(LoadError) load error: win32ole/win32ole"

My config looks like bellow.

```
input {
  wmi { # Connect to a remote host
    query => "select * from Win32_Process"
    host => "ip"
    user => "domain\login"
    password => "password"
  }
}
 output {
 file {
   path => "/var/log/logstash/test.log"
 }

```

Error log looks like this.

```
Aug 28 18:45:33 host.domain.pl logstash[26777]: [2020-08-28T18:45:33,467][ERROR][logstash.agent] Failed to execute action {:id=>:main, :action_type=>LogStash::ConvergeResult::FailedAction, :message=>"Could not execute action: PipelineAction::Create<main>, action_result: false", :backtrace=>nil}
Aug 28 18:45:33 host.domain.pl logstash[26777]: [2020-08-28T18:45:33,502][DEBUG][logstash.agent] Starting puma
Aug 28 18:45:33 host.domain.pl logstash[26777]: [2020-08-28T18:45:33,518][DEBUG][logstash.agent] Trying to start WebServer {:port=>9600}
Aug 28 18:45:33 host.domain.pl logstash[26777]: [2020-08-28T18:45:33,521][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: Logstash stopped processing because of an error: (LoadError) load error: win32ole/win32ole -- java.lang.UnsatisfiedLinkError: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/jruby-win32ole-0.8.5/lib/racob-x64.dll: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/jruby-win32ole-0.8.5/lib/racob-x64.dll: invalid ELF header (Possible cause: endianness mismatch)

```

I have found [this](https://discuss.elastic.co/t/logstash-input-wmi/184083) topic but there is no answear to this problem.

I have found also [https://github.com/logstash-plugins/logstash-input-eventlog/issues/5](http://this) but this is old topic and was supposed to be fixed in 1.5  
logstash version.

Was is the current solution to this problem?

---

<div class="post-metadata">

**Author:** ![Adriann](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adriann/32/77780_2.png) [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Post date:** [September 1, 2020, 10:08am UTC](https://discuss.elastic.co/t/logstash-input-wmi-error-in-logs/246796/2 "2020-09-01T10:08:29Z")

</div>

Do you need some more information? I realy dont know how to solve this. Should I upgrade logstash to 7.9?

---

<div class="post-metadata">

**Author:** ![Adriann](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adriann/32/77780_2.png) [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Post date:** [September 2, 2020, 9:34pm UTC](https://discuss.elastic.co/t/logstash-input-wmi-error-in-logs/246796/3 "2020-09-02T21:34:16Z")

</div>

I have upgraded to 7.9 but error is still the same. I am on centos 7/x64.

---

<div class="post-metadata">

**Author:** ![Adriann](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adriann/32/77780_2.png) [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Post date:** [September 3, 2020, 9:53am UTC](https://discuss.elastic.co/t/logstash-input-wmi-error-in-logs/246796/4 "2020-09-03T09:53:50Z")

</div>

I wanted to try instaling jruby-win32ole in version jruby-win32ole-0.8.4 but i got

> Sep 03 11:51:43 pl-s950net-tools.cp.pl logstash[6268]: [ERROR] 2020-09-03 11:51:43.303 [main] Logstash - java.lang.IllegalStateException: Logstash stopped processing because of an error: (GemNotFound) Could not find jruby-win32ole-0.8.5 in any of the sources

Where do I need to change the version of a file so logstash see the new version of a gem?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 1, 2020, 9:53am UTC](https://discuss.elastic.co/t/logstash-input-wmi-error-in-logs/246796/5 "2020-10-01T09:53:51Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.