# Logstash service not starting

**URL:** https://discuss.elastic.co/t/logstash-service-not-starting/87849
**Category:** Logstash
**Created:** [June 1, 2017, 7:07am UTC](https://discuss.elastic.co/t/logstash-service-not-starting/87849 "2017-06-01T07:07:25Z")
**Posts on this page:** 13
**Page:** 1

<div class="post-metadata">

### Author: ![moorthyrajesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moorthyrajesh/32/14394_2.png) [@moorthyrajesh](https://discuss.elastic.co/u/moorthyrajesh)
#### Post date: [June 1, 2017, 7:07am UTC](https://discuss.elastic.co/t/logstash-service-not-starting/87849/1 "2017-06-01T07:07:26Z")

</div>

i have an issue similar to

[https://www.elastic.co/guide/en/logstash/current/running-logstash.html#running-logstash-upstart](https://www.elastic.co/guide/en/logstash/current/running-logstash.html#running-logstash-upstart)

os: Ununtu Mate 14.04

logstash service not starting  
sudo initctl start logstash  
result: unknown job logstash

Java -version  
java version "1.8.0\_131"  
Java(TM) SE Runtime Environment (build 1.8.0\_131-b11)  
Java HotSpot(TM) 64-Bit Server VM (build 25.131-b11, mixed mode)

Logstash was workiing in the morning but suddenly i have this error any clues  
regards  
Rajesh

---

<div class="post-metadata">

### Author: ![pts0](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pts0/32/17811_2.png) [@pts0](https://discuss.elastic.co/u/pts0)
#### Post date: [June 1, 2017, 7:24am UTC](https://discuss.elastic.co/t/logstash-service-not-starting/87849/2 "2017-06-01T07:24:47Z")

</div>

Hi,  
Could you include the log file, without it I don't think somebody can help you.

Thx

---

<div class="post-metadata">

### Author: ![moorthyrajesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moorthyrajesh/32/14394_2.png) [@moorthyrajesh](https://discuss.elastic.co/u/moorthyrajesh)
#### Post date: [June 1, 2017, 7:27am UTC](https://discuss.elastic.co/t/logstash-service-not-starting/87849/3 "2017-06-01T07:27:53Z")

</div>

The logs from /var/log/logstash/logstash-plain.log

[2017-06-01T11:09:50,217][FATAL][logstash.runner] An unexpected error occurred! {:error=\>#\<ArgumentError: Path "/usr/share/logstash/data/queue" must be a writable directory. It is not writable.\>, :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/settings.rb:420:in `validate'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:202:in`validate\_value'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:118:in `validate_all'", "org/jruby/RubyHash.java:1342:in`each'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:117:in `validate_all'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:210:in`execute'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:67:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:183:in`run'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:132:in `run'", "/usr/share/logstash/lib/bootstrap/environment.rb:71:in`(root)'"]}  
[2017-06-01T11:09:58,953][FATAL][logstash.runner] An unexpected error occurred! {:error=\>#\<ArgumentError: Path "/usr/share/logstash/data/queue" must be a writable directory. It is not writable.\>, :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/settings.rb:420:in `validate'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:202:in`validate\_value'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:118:in `validate_all'", "org/jruby/RubyHash.java:1342:in`each'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:117:in `validate_all'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:210:in`execute'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:67:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:183:in`run'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:132:in `run'", "/usr/share/logstash/lib/bootstrap/environment.rb:71:in`(root)'"]}

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 1, 2017, 7:32am UTC](https://discuss.elastic.co/t/logstash-service-not-starting/87849/4 "2017-06-01T07:32:32Z")

</div>

What does your config look like?

---

<div class="post-metadata">

### Author: ![pts0](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pts0/32/17811_2.png) [@pts0](https://discuss.elastic.co/u/pts0)
#### Post date: [June 1, 2017, 7:33am UTC](https://discuss.elastic.co/t/logstash-service-not-starting/87849/5 "2017-06-01T07:33:39Z")

</div>

Wow 2 log entries, so much.  
Are you sure it was working, how log run ? For me i look some config issue, not really starting.

PS: please format the logs wiht

`quote text`

make forum more readable.

---

<div class="post-metadata">

### Author: ![moorthyrajesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moorthyrajesh/32/14394_2.png) [@moorthyrajesh](https://discuss.elastic.co/u/moorthyrajesh)
#### Post date: [June 1, 2017, 8:19am UTC](https://discuss.elastic.co/t/logstash-service-not-starting/87849/6 "2017-06-01T08:19:18Z")

</div>

PTSO - Had a look at the config. the config.d looked pretty empty. Not sure how. I have not meddled with it. Will reformat the log The same log is continually appearing. has not stopped till now!! (FYI)

[2017-06-01T11:09:58,953][FATAL][logstash.runner] An unexpected error occurred! {:error=\>#, :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/settings.rb:420:in validate'",  
"/usr/share/logstash/logstash-core/lib/logstash/settings.rb:202:invalidate\_value'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:118:in validate\_all'",  
"org/jruby/RubyHash.java:1342:ineach'",  
"/usr/share/logstash/logstash-core/lib/logstash/settings.rb:117:in validate\_all'",  
"/usr/share/logstash/logstash-core/lib/logstash/runner.rb:210:inexecute'",  
"/usr/share/logstash/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:67:in run'",  
"/usr/share/logstash/logstash-core/lib/logstash/runner.rb:183:inrun'",  
"/usr/share/logstash/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:132:in run'",  
"/usr/share/logstash/lib/bootstrap/environment.rb:71:in(root)'"]}  
[/quote]

Trust this helps!!

---

<div class="post-metadata">

### Author: ![pts0](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pts0/32/17811_2.png) [@pts0](https://discuss.elastic.co/u/pts0)
#### Post date: [June 1, 2017, 8:28am UTC](https://discuss.elastic.co/t/logstash-service-not-starting/87849/7 "2017-06-01T08:28:29Z")

</div>

Well if you don't have any config how can logstash work ? I don't think zero config is supported. Try with a basic config to start it.

---

<div class="post-metadata">

### Author: ![moorthyrajesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moorthyrajesh/32/14394_2.png) [@moorthyrajesh](https://discuss.elastic.co/u/moorthyrajesh)
#### Post date: [June 1, 2017, 9:40am UTC](https://discuss.elastic.co/t/logstash-service-not-starting/87849/8 "2017-06-01T09:40:13Z")

</div>

btw. Were you talking about logstash.yml??  
The only thing that is uncommented is  
"path.config: /etc/logstash/conf.d"

but this folder is empty. There are other config files to read from db etc., under etc/logstash..

---

<div class="post-metadata">

### Author: ![moorthyrajesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moorthyrajesh/32/14394_2.png) [@moorthyrajesh](https://discuss.elastic.co/u/moorthyrajesh)
#### Post date: [June 1, 2017, 10:15am UTC](https://discuss.elastic.co/t/logstash-service-not-starting/87849/9 "2017-06-01T10:15:46Z")

</div>

To add on to the above, just been 15 days since i started with this new version and for the first tim e kibana.

Sorry if I sound foolish. Any help appreciated.

regards

---

<div class="post-metadata">

### Author: ![moorthyrajesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moorthyrajesh/32/14394_2.png) [@moorthyrajesh](https://discuss.elastic.co/u/moorthyrajesh)
#### Post date: [June 5, 2017, 3:37am UTC](https://discuss.elastic.co/t/logstash-service-not-starting/87849/10 "2017-06-05T03:37:34Z")

</div>

Can anybody help on this please. My configuration is there on logstash.yml. Basicall only the path to the config file is uncommented.  
configuration files that was able to read data from Oracle servers are still intact, no change.  
Have restarted the server, Elastic and kibana has started. still logstash is not starting

I am not sure what else to try

regards  
Rajesh

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [June 5, 2017, 8:52am UTC](https://discuss.elastic.co/t/logstash-service-not-starting/87849/11 "2017-06-05T08:52:57Z")

</div>

What does your config look like?

---

<div class="post-metadata">

### Author: ![moorthyrajesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/moorthyrajesh/32/14394_2.png) [@moorthyrajesh](https://discuss.elastic.co/u/moorthyrajesh)
#### Post date: [June 5, 2017, 9:49am UTC](https://discuss.elastic.co/t/logstash-service-not-starting/87849/12 "2017-06-05T09:49:57Z")

</div>

Thanks warkolm.  
I dont know what i did logstash is working. My mistake . I was working on ubuntu mate 14.04. there logstash does not work as a service. I just shifted from 16.04 due to lack of space.

I restarted the machine, I suppose I did not have to do anything, just wait. The time taken for each of the service to start was more and hence the confusion. Thanks to everyones help and time

Very much appreciated.

regards  
Rajesh

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 3, 2017, 9:50am UTC](https://discuss.elastic.co/t/logstash-service-not-starting/87849/13 "2017-07-03T09:50:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
