# Logstash pipe input suddenly restarting

**URL:** <https://discuss.elastic.co/t/logstash-pipe-input-suddenly-restarting/144864>\
**Category:** Logstash\
**Created:** [August 17, 2018, 9:37am UTC](https://discuss.elastic.co/t/logstash-pipe-input-suddenly-restarting/144864 "2018-08-17T09:37:38Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Lubomir\_Bielik](https://avatars.discourse-cdn.com/v4/letter/l/f08c70/32.png) [@Lubomir\_Bielik](https://discuss.elastic.co/u/Lubomir_Bielik)\
**Post date:** [August 17, 2018, 9:37am UTC](https://discuss.elastic.co/t/logstash-pipe-input-suddenly-restarting/144864/1 "2018-08-17T09:37:39Z")

</div>

Hello,  
I am using Logstash's pipe input to run another command, for Snort, and collect its output. It was running fine for a few days, so i was developing grok filters for output and so on, but today when I started Logstash again, it is restarting Snort command each time after Snort initializes.

It wasn't like that before, it just started Snort and i was able to see its stdout on each alert.  
This morning, when Snort initializes, it immediately start initializing again, and so on. Snort on itself, without Logstash, is running perfecly fine.

I didn't change anything since the time it was running. It started on its own, just today morning.

I even tried to alter ruby file pipe.rb according to this: [https://github.com/elastic/logstash/pull/1415/commits/81cf8754de4b0c1b9efe9490f1af52dd8b01edc6](https://github.com/elastic/logstash/pull/1415/commits/81cf8754de4b0c1b9efe9490f1af52dd8b01edc6), but it didn' even started Snort.

Any help is appreciated.

---

<div class="post-metadata">

**Author:** ![Lubomir\_Bielik](https://avatars.discourse-cdn.com/v4/letter/l/f08c70/32.png) [@Lubomir\_Bielik](https://discuss.elastic.co/u/Lubomir_Bielik)\
**Post date:** [August 17, 2018, 9:56am UTC](https://discuss.elastic.co/t/logstash-pipe-input-suddenly-restarting/144864/2 "2018-08-17T09:56:58Z")

</div>

Now it suddenly started working again... I just altered pipe.rb back and tried starting it again... No idea what could have caused the restarting.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 14, 2018, 9:57am UTC](https://discuss.elastic.co/t/logstash-pipe-input-suddenly-restarting/144864/3 "2018-09-14T09:57:09Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.