Logstash installation on older version

Elastic Stack Logstash
1

Hi how can I install Logstash 7.1.1 on Centos 6.10 ? So far cant get any guide on this.

Reason, my other servers are using Kibana and ES version 7.1.1. Thanks

2

When I do the installation steps, it prompt me with this:

sudo rpm --install logstash-7.1.1.rpm
        package logstash-1:7.1.1-1.noarch is already installed

How am I able to overcome this? Besides that, do I need to install the ES on the server for logstash to work? As I am planning for this logstash to collect data and send it over to other server to be stored on ES.

3 
/usr/share/logstash/conf.d# /usr/share/logstash/bin/logstash -f /usr/share/logstash/conf.d/logstash.conf
Picked up _JAVA_OPTIONS: -Xmx9g
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by com.headius.backport9.modules.Modules (file:/usr/share/logstash/logstash-core/lib/jars/jruby-complete-9.2.7.0.jar) to field java.io.FileDescriptor.fd
WARNING: Please consider reporting this to the maintainers of com.headius.backport9.modules.Modules
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
Thread.exclusive is deprecated, use Thread::Mutex
WARNING: Could not find logstash.yml which is typically located in $LS_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults
Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs errors to the console
[WARN ] 2019-10-14 16:09:17.638 [LogStash::Runner] multilocal - Ignoring the 'pipelines.yml' file because modules or command line options are specified
[FATAL] 2019-10-14 16:09:17.656 [LogStash::Runner] runner - Logstash could not be started because there is already another instance using the configured data directory.  If you wish to run multiple instances, you must change the "path.data" setting.
[ERROR] 2019-10-14 16:09:17.660 [LogStash::Runner] Logstash - java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit

Dear all please advise. If I am executing the command from /usr/share/logstash folder, do I still need to use "/usr/share/logstash/bin/logstash -f /usr/share/logstash/conf.d/logstash.conf"

4

Logstash Logs folder access rights, is it correct?

-rwxrw-r-- 1 logstash logstash     0 Oct 14 15:13 logstash-slowlog-plain.log
-rwxrw-r-- 1 logstash logstash 56753 Oct 14 15:53 logstash-plain.log
drwxr-xr-x 2 logstash logstash  4096 Oct 15 17:44 queue
drwxr-xr-x 2 logstash logstash  4096 Oct 15 17:44 dead_letter_queue
-rw-r--r-- 1 logstash logstash    36 Oct 15 17:44 uuid
5

Does any expert can help to advise why my Logstash process keep restarting ?

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.