Logstash is not up & running on MacOS

[inandi (Gobinda Nandi)]

(in Docker) Logstash is not running on MAC, but the same thing is working on Windows

getting below error

2023-11-09 01:12:57 runtime: failed to create new OS thread (have 2 already; errno=22)
2023-11-09 01:12:57 fatal error: newosproc
2023-11-09 01:12:57 
2023-11-09 01:12:57 runtime stack:
2023-11-09 01:12:57 runtime.throw(0x532c50, 0x9)
2023-11-09 01:12:57     /usr/local/go/src/runtime/panic.go:596 +0x95
2023-11-09 01:12:57 runtime.newosproc(0xc420028000, 0xc420038000)
2023-11-09 01:12:57     /usr/local/go/src/runtime/os_linux.go:163 +0x18c
2023-11-09 01:12:57 runtime.newm(0x53bb40, 0x0)
2023-11-09 01:12:57     /usr/local/go/src/runtime/proc.go:1628 +0x137
2023-11-09 01:12:57 runtime.main.func1()
2023-11-09 01:12:57     /usr/local/go/src/runtime/proc.go:126 +0x36
2023-11-09 01:12:57 runtime.systemstack(0x5c5c00)
2023-11-09 01:12:57     /usr/local/go/src/runtime/asm_amd64.s:327 +0x79
2023-11-09 01:12:57 runtime.mstart()
2023-11-09 01:12:57     /usr/local/go/src/runtime/proc.go:1132
2023-11-09 01:12:57 
2023-11-09 01:12:57 goroutine 1 [running]:
2023-11-09 01:12:57 runtime.systemstack_switch()
2023-11-09 01:12:57     /usr/local/go/src/runtime/asm_amd64.s:281 fp=0xc420024788 sp=0xc420024780
2023-11-09 01:12:57 runtime.main()
2023-11-09 01:12:57     /usr/local/go/src/runtime/proc.go:127 +0x6c fp=0xc4200247e0 sp=0xc420024788
2023-11-09 01:12:57 runtime.goexit()
2023-11-09 01:12:57     /usr/local/go/src/runtime/asm_amd64.s:2197 +0x1 fp=0xc4200247e8 sp=0xc4200247e0

here is my logstash setup (docker-compose.yml)

logstash:
    container_name: $DOCKER_IMAGE_LOGSTASH
    platform: linux/amd64
    build:
      context: ./config/logstash/
      args:
        ELK_VERSION: $ELK_VERSION
    volumes:
      - type: bind
        source: ./config/logstash/config/logstash.yml
        target: /usr/share/logstash/config/logstash.yml
        read_only: true
      - type: bind
        source: ./config/logstash/pipeline
        target: /usr/share/logstash/pipeline
        read_only: true
      - type: bind
        source: ./app/logs/logstash/
        target: /var/log/logstash-data/
    ports:
      - "${LOGSTASH_TCP_PORT:-7001}:7001/tcp"
      - "${LOGSTASH_UDP_PORT:-7002}:7002/udp"
      - "${LOGSTASH_PORT:-9600}:9600"
    environment:
      LS_JAVA_OPTS: "-Xmx256m -Xms256m"
    networks:
      - elk
    depends_on:
      - elasticsearch

What to do?

[leandrojmp (Leandro Pereira)]

This is not a Logstash issue, but a Docker issue related to Apple Silicon chips.

Please check this issue on Docker Github with more details

I do not user Docker nor MacOS, but if I'm not wrong you need to use the arm64v8 images.