Logstash rpm service on unix

[fadihaddad (fadi)]

okay i was running logstash on unix using the /bin logstash comman but it gives the warning that it cant find the logstash.yml when it already exists so i found out that i should run it as a service so i did that and the service is keeping on restarting and giving these errors even running on root

019-01-25 12:09:09,067 main ERROR Unable to invoke factory method in class org.apache.logging.log4j.core.appender.RollingFileAppender for element RollingFile: java.lang.IllegalStateException: No factory method found for class org.apache.logging.log4j.core.appender.RollingFileAppender java.lang.IllegalStateException: No factory method found for class org.apache.logging.log4j.core.appender.RollingFileAppender

java.io.FileNotFoundException: /var/log/logstash/logstash-slowlog-plain.log (Permission denied) java.io.FileNotFoundException: /var/log/logstash/logstash-slowlog-plain.log (Permission denied)

also please I want to know all the permissions I need to enable on unix bc I have limited time access on root

[guyboertje]

Does this help?

What permissions does logstash need to run as a service?

I am running Logstash as a service, but it doesn't collect the logs. But when I run the bynary (bin/logstash -f test.conf) I collect the logs. And in the two cases I am using the same .conf file. In other posts it is said I need to give Logstash permissions, but I've been unable to identify what files/folders have to be granted permission. Could someone point that? Thanks in advance!