# Logstash Service does not start after running the Netflow module **URL:** \ **Category:** Logstash\ **Created:** [September 25, 2019, 7:46pm UTC](https://discuss.elastic.co/t/logstash-service-does-not-start-after-running-the-netflow-module/201097 "2019-09-25T19:46:01Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![eemtzc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/eemtzc/32/54095_2.png) [@eemtzc](https://discuss.elastic.co/u/eemtzc)\ **Post date:** [September 25, 2019, 7:46pm UTC](https://discuss.elastic.co/t/logstash-service-does-not-start-after-running-the-netflow-module/201097/1 "2019-09-25T19:46:01Z")
Ok, here is what happened. Originally we had a pipeline to receive logs from our firewalls devices to our ELK stack, and everything was working perfect. Then we will like to add, to the same logstash server, the Netflow module. So I went through the Netflow module configuration as suggested in [https://www.elastic.co/guide/en/logstash/current/netflow-module.html#configuring-netflow](https://www.elastic.co/guide/en/logstash/current/netflow-module.html#configuring-netflow) I set up the logstash.yml file with the module parameters we need, according to our configurations, stopped the logstash service using systemctl stop logstash, and finally ran bin/logstash --modules netflow --setup --path.settings /etc/logstash Everything seems to work, I went to my Kibana, search for the Index pattern of Netflow-\* and there it was, the only thing was that it wasn't getting data. went back to my logstash server and realized the logstash service was not running, used the systemctl start logstash and only getting this: Sep 25 12:06:07 [XXXXX.com](http://XXXXX.com) systemd[1]: Started logstash. Sep 25 12:06:07 [XXXXX.com](http://XXXXX.com) systemd[1]: Starting logstash... Sep 25 12:06:44 [XXXXX.com](http://XXXXX.com) systemd[1]: Stopping logstash... Sep 25 12:06:44 [XXXXX.com](http://XXXXX.com) systemd[1]: logstash.service: main process exited, code=exited, status=143/n/a Sep 25 12:06:44 [XXXXX.com](http://XXXXX.com) systemd[1]: Stopped logstash. Sep 25 12:06:44 [XXXXX.com](http://XXXXX.com) systemd[1]: Unit logstash.service entered failed state. Sep 25 12:06:44 [XXXXX.com](http://XXXXX.com) systemd[1]: logstash.service failed. Checked the logstash log from /var/log/logstash/logstash-plain.log and I am getting this [2019-09-25T00:13:15,285][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit [2019-09-25T00:14:16,027][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified [2019-09-25T00:14:16,044][FATAL][logstash.runner] Logstash could not be started because there is already another instance using the configured data directory. If you wish to run multiple instances so NOW I am not getting the data from Netflow and not getting the data from my working Pipeline. Any suggestions? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 23, 2019, 7:46pm UTC](https://discuss.elastic.co/t/logstash-service-does-not-start-after-running-the-netflow-module/201097/2 "2019-10-23T19:46:02Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.