# Logstash shuts down in Remote Windows

**URL:** <https://discuss.elastic.co/t/logstash-shuts-down-in-remote-windows/308332>\
**Category:** Logstash\
**Created:** [June 28, 2022, 8:14am UTC](https://discuss.elastic.co/t/logstash-shuts-down-in-remote-windows/308332 "2022-06-28T08:14:21Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![suresh\_u](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/suresh_u/32/107394_2.png) [@suresh\_u](https://discuss.elastic.co/u/suresh_u)\
**Post date:** [June 28, 2022, 8:14am UTC](https://discuss.elastic.co/t/logstash-shuts-down-in-remote-windows/308332/1 "2022-06-28T08:14:21Z")

</div>

Hi Team,  
I am using Logstash tool to sync(transfer) Oracle DB data to ElasticSearch index.  
I am running Logstash as a windows service in a Remote Windows server machine.  
I have run Logstash on Friday(24-6-2022 around 8PM).  
After 1 hour, I log out from Remote Windows.  
Today I have opened the logs: it is showing below log message::

**[2022-06-24T09:01:43,438][INFO][logstash.inputs.jdbc][main][71f8cffeecea603df3eeab7722a780385060501c5ccd6bb01ddff67e7652dc7d] (0.004860s) SELECT req.ID,req.BU\_COUNTRY,req.BUID,req.CFO\_ACTION,req.CFO\_SUB\_TYPE,req.CFO\_TYPE,req.DELIVERY\_METHOD,req.DOC\_NUMBER,req.CORRELATION\_ID,req.ORIGINATOR,req.ORDER\_NUMBER,req.STATUS\_CODE\_ID,req.CREATED\_DATE,req.LAST\_UPDATE\_DATE,req.DELIVERY\_DATE,req.MSG\_ID,req.RESPONSE\_CODE,req.IS\_ACTIVE,code.STATUS\_DESC FROM request req,statuscode code WHERE req.STATUS\_CODE\_ID=code.ID AND req.last\_update\_date \> TIMESTAMP '2022-06-24 05:23:02.095000 +00:00' AND req.originator='Veritas' AND req.cfo\_type='PO\_Match'**  
**[2022-06-24T09:01:45,822][INFO][logstash.inputs.jdbc][main][71f8cffeecea603df3eeab7722a780385060501c5ccd6bb01ddff67e7652dc7d] (0.004328s) SELECT req.ID,req.BU\_COUNTRY,req.BUID,req.CFO\_ACTION,req.CFO\_SUB\_TYPE,req.CFO\_TYPE,req.DELIVERY\_METHOD,req.DOC\_NUMBER,req.CORRELATION\_ID,req.ORIGINATOR,req.ORDER\_NUMBER,req.STATUS\_CODE\_ID,req.CREATED\_DATE,req.LAST\_UPDATE\_DATE,req.DELIVERY\_DATE,req.MSG\_ID,req.RESPONSE\_CODE,req.IS\_ACTIVE,code.STATUS\_DESC FROM request req,statuscode code WHERE req.STATUS\_CODE\_ID=code.ID AND req.last\_update\_date \> TIMESTAMP '2022-06-24 05:23:02.095000 +00:00' AND req.originator='Veritas' AND req.cfo\_type='PO\_Match'**  
**[2022-06-24T09:01:47,830][INFO][logstash.inputs.jdbc][main][71f8cffeecea603df3eeab7722a780385060501c5ccd6bb01ddff67e7652dc7d] (0.005127s) SELECT req.ID,req.BU\_COUNTRY,req.BUID,req.CFO\_ACTION,req.CFO\_SUB\_TYPE,req.CFO\_TYPE,req.DELIVERY\_METHOD,req.DOC\_NUMBER,req.CORRELATION\_ID,req.ORIGINATOR,req.ORDER\_NUMBER,req.STATUS\_CODE\_ID,req.CREATED\_DATE,req.LAST\_UPDATE\_DATE,req.DELIVERY\_DATE,req.MSG\_ID,req.RESPONSE\_CODE,req.IS\_ACTIVE,code.STATUS\_DESC FROM request req,statuscode code WHERE req.STATUS\_CODE\_ID=code.ID AND req.last\_update\_date \> TIMESTAMP '2022-06-24 05:23:02.095000 +00:00' AND req.originator='Veritas' AND req.cfo\_type='PO\_Match'**  
**[2022-06-24T09:01:48,190][WARN][logstash.runner] SIGINT received. Shutting down.**  
**[2022-06-24T09:01:48,681][FATAL][logstash.runner] SIGINT received. Terminating immediately..**  
\*\*[2022-06-24T09:01:48,904][FATAL][org.logstash.Logstash] \*\*  
**org.jruby.exceptions.ThreadKill: null**

Could you please help me to resolve this issue?  
This is my logstash configuration:

input {  
jdbc {  
clean\_run =\> true  
jdbc\_driver\_library =\> "C:\Users\User1\WorkingDirectory\Softwares\logstash-7.17.4\ojdbc8.jar"  
jdbc\_driver\_class =\> "Java::oracle.jdbc.driver.OracleDriver"  
jdbc\_connection\_string =\> "jdbc:oracle:thin:@db1-cname.us.domain.com:1521/db1.sit.domain.com"  
jdbc\_user =\> "password"  
jdbc\_password =\> "password$123"  
schedule =\> "\*/1 \* \* \* \* \*"  
statement =\> "SELECT req.ID,req.BU\_COUNTRY,req.BUID,req.CFO\_ACTION,req.CFO\_SUB\_TYPE,req.CFO\_TYPE,req.DELIVERY\_METHOD,req.DOC\_NUMBER,req.CORRELATION\_ID,req.ORIGINATOR,req.ORDER\_NUMBER,req.STATUS\_CODE\_ID,req.CREATED\_DATE,req.LAST\_UPDATE\_DATE,req.DELIVERY\_DATE,req.MSG\_ID,req.RESPONSE\_CODE,req.IS\_ACTIVE,code.STATUS\_DESC FROM request req,statuscode code WHERE req.STATUS\_CODE\_ID=code.ID AND req.last\_update\_date \> :sql\_last\_value AND req.originator='Veritas' AND req.cfo\_type='PO\_Match'"  
use\_column\_value =\> true  
tracking\_column =\> "last\_update\_date"  
tracking\_column\_type =\> "timestamp"  
}  
}  
filter {  
mutate {  
remove\_field =\> ["@version", "@timestamp"]  
}  
}  
output {  
elasticsearch{  
hosts =\> ["[https://abcb01.us.domain.com:9200](https://abcb01.us.domain.com:9200)","[https://audb02.us.domain.com:9200](https://audb02.us.domain.com:9200)","[https://aub03.us.domain.com:9200](https://aub03.us.domain.com:9200)"]  
index =\> "testsit2"  
user =\> "devapp01"  
password =\> "devapp01"  
ssl =\> true  
ssl\_certificate\_verification =\> true  
cacert =\> 'C:\Users\User1\WorkingDirectory\Softwares\logstash-7.17.4\nonprodescertificate.cer'  
document\_id =\> "%{id}"  
doc\_as\_upsert =\> true  
}  
}

Could you please help me out to run Logstash Continuously?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 28, 2022, 8:22am UTC](https://discuss.elastic.co/t/logstash-shuts-down-in-remote-windows/308332/2 "2022-06-28T08:22:01Z")

</div>

> [@suresh\_u](#):
>
> **[2022-06-24T09:01:48,190][WARN][logstash.runner] SIGINT received. Shutting down.**

This would suggest that something is asking Logstash to shutdown. What do your system logs show?

---

<div class="post-metadata">

**Author:** ![suresh\_u](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/suresh_u/32/107394_2.png) [@suresh\_u](https://discuss.elastic.co/u/suresh_u)\
**Post date:** [June 28, 2022, 9:45am UTC](https://discuss.elastic.co/t/logstash-shuts-down-in-remote-windows/308332/3 "2022-06-28T09:45:29Z")

</div>

I did not understand @warkolm. You mean Logstash Logs?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 28, 2022, 10:35am UTC](https://discuss.elastic.co/t/logstash-shuts-down-in-remote-windows/308332/4 "2022-06-28T10:35:24Z")

</div>

No, your OS logs.

---

<div class="post-metadata">

**Author:** ![suresh\_u](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/suresh_u/32/107394_2.png) [@suresh\_u](https://discuss.elastic.co/u/suresh_u)\
**Post date:** [June 28, 2022, 10:49am UTC](https://discuss.elastic.co/t/logstash-shuts-down-in-remote-windows/308332/5 "2022-06-28T10:49:36Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/a/8/a88a9eff3261020a44fc1a7ad559ab4d3ddcaad2.png)

Could you please refer the screenshot?

Even though I have restarted, logs are not updating. But the service is running.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 26, 2022, 10:49am UTC](https://discuss.elastic.co/t/logstash-shuts-down-in-remote-windows/308332/6 "2022-07-26T10:49:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
