# Logstash stop working priodicly!

**URL:** <https://discuss.elastic.co/t/logstash-stop-working-priodicly/328201>\
**Category:** Logstash\
**Tags:** docker\
**Created:** [March 21, 2023, 10:55pm UTC](https://discuss.elastic.co/t/logstash-stop-working-priodicly/328201 "2023-03-21T22:55:38Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Siavash\_Fazli](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/siavash_fazli/32/103915_2.png) [@Siavash\_Fazli](https://discuss.elastic.co/u/Siavash_Fazli)\
**Post date:** [March 21, 2023, 10:55pm UTC](https://discuss.elastic.co/t/logstash-stop-working-priodicly/328201/1 "2023-03-21T22:55:38Z")

</div>

hi guys. my logstash stopped working several times as you can see in the picture.  
I have 15 pipelines on one docker logstash node  
can anyone guess what happened?

 ![Screenshot 2023-03-22 032314](https://us1.discourse-cdn.com/elastic/original/3X/1/c/1c03db01f6cd3f103ac17ae3744963f4c22c5ba7.png)

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [March 21, 2023, 11:00pm UTC](https://discuss.elastic.co/t/logstash-stop-working-priodicly/328201/2 "2023-03-21T23:00:55Z")

</div>

> [@Siavash\_Fazli](#):
>
> can anyone guess what happened?

No. What do the logstash logs say? Is the logstash process restarting or some of the pipelines?

---

<div class="post-metadata">

**Author:** ![Siavash\_Fazli](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/siavash_fazli/32/103915_2.png) [@Siavash\_Fazli](https://discuss.elastic.co/u/Siavash_Fazli)\
**Post date:** [March 21, 2023, 11:03pm UTC](https://discuss.elastic.co/t/logstash-stop-working-priodicly/328201/3 "2023-03-21T23:03:40Z")

</div>

In the log file pipelines work fine and there isn't any ERROR.  
my container is stable and doesn't restart or down.  
@Badger

---

<div class="post-metadata">

**Author:** ![Siavash\_Fazli](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/siavash_fazli/32/103915_2.png) [@Siavash\_Fazli](https://discuss.elastic.co/u/Siavash_Fazli)\
**Post date:** [March 21, 2023, 11:07pm UTC](https://discuss.elastic.co/t/logstash-stop-working-priodicly/328201/4 "2023-03-21T23:07:43Z")

</div>

As you can see all pipelines stop working together. @Badger

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [March 22, 2023, 12:58am UTC](https://discuss.elastic.co/t/logstash-stop-working-priodicly/328201/5 "2023-03-22T00:58:10Z")

</div>

> [@Siavash\_Fazli](#):
>
> can anyone guess what happened?

Without any logs from Logstash is not possible to know what is the issue, you need to provide some logs to give more context.

Has the container being restarted? Please check for any logs from the logstash container at those times.

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [March 22, 2023, 1:38am UTC](https://discuss.elastic.co/t/logstash-stop-working-priodicly/328201/6 "2023-03-22T01:38:42Z")

</div>

grep for 'Pipelines running' in the logstash log, tell us what you get. Pick a pipeline that stops working, grep for its name in the logstash log and tell us what you get for that. Show us the configuration for that one pipeline.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 19, 2023, 1:39am UTC](https://discuss.elastic.co/t/logstash-stop-working-priodicly/328201/7 "2023-04-19T01:39:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
