# Logstash runs as service but stops sending logs over http after some time

**URL:** <https://discuss.elastic.co/t/logstash-runs-as-service-but-stops-sending-logs-over-http-after-some-time/102938>\
**Category:** Logstash\
**Created:** [October 6, 2017, 3:51am UTC](https://discuss.elastic.co/t/logstash-runs-as-service-but-stops-sending-logs-over-http-after-some-time/102938 "2017-10-06T03:51:56Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![amruth](https://avatars.discourse-cdn.com/v4/letter/a/43a26b/32.png) [@amruth](https://discuss.elastic.co/u/amruth)\
**Post date:** [October 6, 2017, 3:51am UTC](https://discuss.elastic.co/t/logstash-runs-as-service-but-stops-sending-logs-over-http-after-some-time/102938/1 "2017-10-06T03:51:56Z")

</div>

Hi,

I am running Logstash 5 as a service on Redhat machine. Logstash status says, it's running but after some time it stops completely sending logs over http(to another Logstash). I don't see any errors in Logs(Level:Debug). But if I restart Logstash, it works fine and again after some time the problem repeats. Not sure if it's related to HTTP Plugin or Logstash.

Can someone help solve this issue?

Thanks

---

<div class="post-metadata">

**Author:** ![jakelandis](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jakelandis/32/36163_2.png) [@jakelandis](https://discuss.elastic.co/u/jakelandis)\
**Post date:** [October 6, 2017, 4:46pm UTC](https://discuss.elastic.co/t/logstash-runs-as-service-but-stops-sending-logs-over-http-after-some-time/102938/2 "2017-10-06T16:46:05Z")

</div>

These kind of can be difficult to troubleshoot. The only way to really troubleshoot is to grab a few Java thread dumps (jstack -F , or kill -3 and find the output in stdout, which may be journalctl or the like) and examine them for what might be stalling.

It sounds like you are doing Logstash -\> Logstash with HTTP, perhaps you should try Lumberjack output -\> Beats Input instead ? If it is HTTP related, this change should fix it. (Beats/Lumberjack is a TCP protocol)

---

<div class="post-metadata">

**Author:** ![amruth](https://avatars.discourse-cdn.com/v4/letter/a/43a26b/32.png) [@amruth](https://discuss.elastic.co/u/amruth)\
**Post date:** [October 6, 2017, 8:12pm UTC](https://discuss.elastic.co/t/logstash-runs-as-service-but-stops-sending-logs-over-http-after-some-time/102938/3 "2017-10-06T20:12:02Z")

</div>

Hi Jake,

I see the Logstash is stopped now. I checked the logs but there are no logs which say "Logstash is stopped due to....". Without any proper reason it is stopped.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 3, 2017, 8:12pm UTC](https://discuss.elastic.co/t/logstash-runs-as-service-but-stops-sending-logs-over-http-after-some-time/102938/4 "2017-11-03T20:12:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.