# Logstash service keeps dying - no logs

**URL:** <https://discuss.elastic.co/t/logstash-service-keeps-dying-no-logs/103925>\
**Category:** Logstash\
**Created:** [October 13, 2017, 3:56pm UTC](https://discuss.elastic.co/t/logstash-service-keeps-dying-no-logs/103925 "2017-10-13T15:56:30Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![carlfriedrichgauss](https://avatars.discourse-cdn.com/v4/letter/c/6a8cbe/32.png) [@carlfriedrichgauss](https://discuss.elastic.co/u/carlfriedrichgauss)\
**Post date:** [October 13, 2017, 3:56pm UTC](https://discuss.elastic.co/t/logstash-service-keeps-dying-no-logs/103925/1 "2017-10-13T15:56:30Z")

</div>

Trying a new ELK stack install against RHEL 7. Java on openjdk version "1.8.0\_144"

I'm installing an older version (this is an absolute requirement) and used the logstash-2.1.3-1.noarch.rpm package. ES is up and running as a service and I can curl 9200.

I've made 1 super simple config file:

cat /etc/logstash/conf.d/test.conf  
input { stdin { } }  
output { stdout {} }

I try to start the logstash service and it starts, and then takes about 5 seconds to fail with no errors. It just goes from "running" to "not running." All the logs are empty (and owned by logstash:logstash).

---

<div class="post-metadata">

**Author:** ![jsvd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsvd/32/6203_2.png) [@jsvd](https://discuss.elastic.co/u/jsvd)\
**Post date:** [October 13, 2017, 4:52pm UTC](https://discuss.elastic.co/t/logstash-service-keeps-dying-no-logs/103925/2 "2017-10-13T16:52:26Z")

</div>

can you do a configuration like

```auto
input { generator { count => 1 } tcp { port => 3333 } }
output { file { path => "/tmp/test.log"} }

```

and see if logstash stays up and writes data to that file?

---

<div class="post-metadata">

**Author:** ![carlfriedrichgauss](https://avatars.discourse-cdn.com/v4/letter/c/6a8cbe/32.png) [@carlfriedrichgauss](https://discuss.elastic.co/u/carlfriedrichgauss)\
**Post date:** [October 13, 2017, 4:58pm UTC](https://discuss.elastic.co/t/logstash-service-keeps-dying-no-logs/103925/3 "2017-10-13T16:58:31Z")

</div>

That worked to get the process running. What was wrong with my conf file?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 10, 2017, 4:58pm UTC](https://discuss.elastic.co/t/logstash-service-keeps-dying-no-logs/103925/4 "2017-11-10T16:58:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.