# Logstash stop working due to FFI not available: null

**URL:** <https://discuss.elastic.co/t/logstash-stop-working-due-to-ffi-not-available-null/343174>\
**Category:** Logstash\
**Created:** [September 16, 2023, 10:04am UTC](https://discuss.elastic.co/t/logstash-stop-working-due-to-ffi-not-available-null/343174 "2023-09-16T10:04:12Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![lalchand\_rajak](https://avatars.discourse-cdn.com/v4/letter/l/8e7dd6/32.png) [@lalchand\_rajak](https://discuss.elastic.co/u/lalchand_rajak)\
**Post date:** [September 16, 2023, 10:04am UTC](https://discuss.elastic.co/t/logstash-stop-working-due-to-ffi-not-available-null/343174/1 "2023-09-16T10:04:12Z")

</div>

Logstash stopped working due to FFI not available: null . I have already provided the tmp path in Jvm.options

```auto
# set the I/O temp directory
#-Djava.io.tmpdir=$HOME
-Djava.io.tmpdir=/home/apmuser/tmp

drwxrwxr-x. 2 logstash logstash 6 Sep 16 13:25 tmp

```

and the directory is own by logstash but still logstash stops working. any help would be appreciated,

```auto
[2023-09-16T15:31:20,757][INFO][logstash.runner] Starting Logstash {"logstash.version"=>"8.9.1", "jruby.version"=>"jruby 9.3.10.0 (2.6.8) 2023-02-01 107b2e6697 OpenJDK 64-Bit Server VM 17.0.8+7 on 17.0.8+7 +indy +jit [x86_64-linux]"}
[2023-09-16T15:31:20,761][INFO][logstash.runner] JVM bootstrap flags: [-Xms4g, -Xmx4g, -Djava.io.tmpdir=/home/apmuser/tmp, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djruby.compile.invokedynamic=true, -XX:+HeapDumpOnOutOfMemoryError, -Djava.security.egd=file:/dev/urandom, -Dlog4j2.isThreadContextMapInheritable=true, -Djruby.regexp.interruptible=true, -Djdk.io.File.enableADS=true, --add-exports=jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED, --add-exports=jdk.compiler/com.sun.tools.javac.file=ALL-UNNAMED, --add-exports=jdk.compiler/com.sun.tools.javac.parser=ALL-UNNAMED, --add-exports=jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED, --add-exports=jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED, --add-opens=java.base/java.security=ALL-UNNAMED, --add-opens=java.base/java.io=ALL-UNNAMED, --add-opens=java.base/java.nio.channels=ALL-UNNAMED, --add-opens=java.base/sun.nio.ch=ALL-UNNAMED, --add-opens=java.management/sun.management=ALL-UNNAMED]
[2023-09-16T15:31:20,792][FATAL][org.logstash.Logstash] Logstash stopped processing because of an error: (LoadError) Could not load FFI Provider: (NotImplementedError) FFI not available: null
 See http://jira.codehaus.org/browse/JRUBY-4583
org.jruby.exceptions.LoadError: (LoadError) Could not load FFI Provider: (NotImplementedError) FFI not available: null
 See http://jira.codehaus.org/browse/JRUBY-4583
        at org.jruby.ext.jruby.JRubyUtilLibrary.load_ext(org/jruby/ext/jruby/JRubyUtilLibrary.java:216) ~[jruby.jar:?]
        at RUBY.<main>(/usr/share/logstash/vendor/bundle/jruby/2.6.0/gems/ffi-1.15.5-java/lib/ffi.rb:11) ~[?:?]
        at org.jruby.RubyKernel.require(org/jruby/RubyKernel.java:1017) ~[jruby.jar:?]
        at RUBY.<module:LibC>(/usr/share/logstash/logstash-core/lib/logstash/util/prctl.rb:19) ~[?:?]
        at RUBY.<main>(/usr/share/logstash/logstash-core/lib/logstash/util/prctl.rb:18) ~[?:?]
        at org.jruby.RubyKernel.require(org/jruby/RubyKernel.java:1017) ~[jruby.jar:?]
        at RUBY.set_thread_name(/usr/share/logstash/logstash-core/lib/logstash/util.rb:36) ~[?:?]
        at RUBY.execute(/usr/share/logstash/logstash-core/lib/logstash/runner.rb:365) ~[?:?]
        at RUBY.run(/usr/share/logstash/vendor/bundle/jruby/2.6.0/gems/clamp-1.0.1/lib/clamp/command.rb:68) ~[?:?]
        at RUBY.run(/usr/share/logstash/logstash-core/lib/logstash/runner.rb:287) ~[?:?]
        at RUBY.run(/usr/share/logstash/vendor/bundle/jruby/2.6.0/gems/clamp-1.0.1/lib/clamp/command.rb:133) ~[?:?]
        at usr.share.logstash.lib.bootstrap.environment.<main>(/usr/share/logstash/lib/bootstrap/environment.rb:90) ~[?:?]
Caused by: org.jruby.exceptions.NotImplementedError: (NotImplementedError) FFI not available: null

```

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [September 16, 2023, 2:53pm UTC](https://discuss.elastic.co/t/logstash-stop-working-due-to-ffi-not-available-null/343174/2 "2023-09-16T14:53:11Z")

</div>

> [@lalchand\_rajak](#):
>
> `drwxrwxr-x. 2 logstash logstash 6 Sep 16 13:25 tmp`

And what are ther permissions of the parent folder, `apmuser`? Logstash would need permissions on this folder as well.

User folders have permissions only for the user, you would need to change the permissions of the `/home/apmuser` folder.

But I would not recommend this, using another user folder for logstash tmp path, you should create a new path like `/opt/logstash_tmp`, give permissions to the `logstash` user and use this path as the tmp path.

---

<div class="post-metadata">

**Author:** ![lalchand\_rajak](https://avatars.discourse-cdn.com/v4/letter/l/8e7dd6/32.png) [@lalchand\_rajak](https://discuss.elastic.co/u/lalchand_rajak)\
**Post date:** [September 18, 2023, 5:37am UTC](https://discuss.elastic.co/t/logstash-stop-working-due-to-ffi-not-available-null/343174/3 "2023-09-18T05:37:38Z")

</div>

Thanks @leandrojmp , I was able to start the logstash.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 16, 2023, 5:37am UTC](https://discuss.elastic.co/t/logstash-stop-working-due-to-ffi-not-available-null/343174/4 "2023-10-16T05:37:58Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.