Logstash not a service on Amazon AMI :(

All I am pointing out is that based on the documentation I see, and the output of the installation process, the expected behavior of Logstash is different than any of the other ELK stack services.

Amazon Linux AMI release 2016.09

sudo yum list installed | grep elastic
elasticsearch.noarch 5.0.0-1 @elasticsearch-5.x
filebeat.x86_64 5.0.0-1 @elastic-5.x
kibana.x86_64 5.0.0-1 @elastic-5.x
logstash.noarch 1:5.0.0-1 @elastic-5.x
metricbeat.x86_64 5.0.0-1 @elastic-5.x
packetbeat.x86_64 5.0.0-1 @elastic-5.x

Not sure if the 1:5.0.0-1 is significant vs. all the other components, but it is all from repo installs...
With these all at the same version I receive the following results on same system:

Elasticsearch

$ sudo service elasticsearch status
elasticsearch (pid 18607) is running...
$ sudo initctl status elasticsearch
initctl: Unknown job: elasticsearch

Kibana

$sudo service kibana status
kibana is running
$ sudo initctl status kibana
initctl: Unknown job: kibana

Packetbeat

$ sudo service packetbeat status
packetbeat-god (pid 3699) is running...
$ sudo initctl status packetbeat
initctl: Unknown job: packetbeat

Metricbeat

$ sudo service metricbeat status
metricbeat-god (pid 24120) is running...
$ sudo initctl status metricbeat
initctl: Unknown job: metricbeat

Filebeat

$ service filebeat status
filebeat-god (pid 3571) is running...
$ sudo initctl status filebeat
initctl: Unknown job: filebeat

Logstash

$ service logstash status
logstash: unrecognized service
$ sudo initctl status logstash
logstash stop/waiting

I am aware of the various ways to start a linux process, I am just pointing out that logstash is the only component which does not conform to the others. I am fine with whatever process, just saying that the phrase "one of these things does not belong, one of these things is not like the other..." comes to mind.

Managing server farms is difficult when a known good process, which has worked in previous versions, and works in all companion processes, does not follow the same guidelines.

My two cents. Sorry for the quasi rant.

5 Likes