# Logstash stops often

**URL:** <https://discuss.elastic.co/t/logstash-stops-often/69135>\
**Category:** Logstash\
**Created:** [December 15, 2016, 9:37am UTC](https://discuss.elastic.co/t/logstash-stops-often/69135 "2016-12-15T09:37:11Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![marcmga](https://avatars.discourse-cdn.com/v4/letter/m/3bc359/32.png) [@marcmga](https://discuss.elastic.co/u/marcmga)\
**Post date:** [December 15, 2016, 9:37am UTC](https://discuss.elastic.co/t/logstash-stops-often/69135/1 "2016-12-15T09:37:12Z")

</div>

Hi,

Since a long time ago my logstash is stopping. The log shows this error:

> {:timestamp=\>"2016-12-14T23:12:28.910000+0100", :message=\>"Exception in filterworker, the pipeline stopped processing new events, please check your filter configuration and restart Logstash  
> .", "exception"=\>#\<RuntimeError: can't add a new key into hash during iteration\>, "backtrace"=\>["org/jruby/RubyHash.java:992:in `[]='", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash- filter-throttle-2.0.2/lib/logstash/filters/throttle.rb:186:in `filter'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.0.0-java/lib/logstash/filters/base.rb:152:in `multi_filt er'", "org/jruby/RubyArray.java:1613:in `each'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.0.0-java/lib/logstash/filters/base.rb:149:in `multi_filter'", "(eval):22760:in `  
> cond\_func\_1157'", "org/jruby/RubyArray.java:1613:in `each'", "(eval):22757:in `cond\_func\_1157'", "(eval):22783:in `cond_func_1156'", "org/jruby/RubyArray.java:1613:in `each'", "(eval):22780  
> :in `cond_func_1156'", "(eval):3028:in `filter\_func'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.0.0-java/lib/logstash/pipeline.rb:219:in `filterworker'", "/opt/logstash/v endor/bundle/jruby/1.9/gems/logstash-core-2.0.0-java/lib/logstash/pipeline.rb:154:in `start\_filters'"], :level=\>:error}  
> {:timestamp=\>"2016-12-14T23:12:28.910000+0100", :message=\>"Exception in filterworker, the pipeline stopped processing new events, please check your filter configuration and restart Logstash  
> .", "exception"=\>#\<NoMethodError: undefined method `[]' for nil:NilClass>, "backtrace"=>["/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-filter-throttle-2.0.2/lib/logstash/filters/thro ttle.rb:196:in `filter'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.0.0-java/lib/logstash/filters/base.rb:152:in `multi_filter'", "org/jruby/RubyArray.java:1613:in `each'"  
> , "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.0.0-java/lib/logstash/filters/base.rb:149:in `multi_filter'", "(eval):22760:in `cond\_func\_1157'", "org/jruby/RubyArray.java:161  
> 3:in `each'", "(eval):22757:in `cond\_func\_1157'", "(eval):22783:in `cond_func_1156'", "org/jruby/RubyArray.java:1613:in `each'", "(eval):22780:in `cond_func_1156'", "(eval):3028:in `filter\_  
> func'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.0.0-java/lib/logstash/pipeline.rb:219:in `filterworker'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.0.0 -java/lib/logstash/pipeline.rb:154:in `start\_filters'"], :level=\>:error}

I understand that the problem deals with throttle.  
What can i do to fix this? it is productibeless as i should restart logstash to make it work again.

My cnf file is huge, so if you need let me know where to upload it.

Thanks

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 19, 2016, 1:52am UTC](https://discuss.elastic.co/t/logstash-stops-often/69135/2 "2016-12-19T01:52:07Z")

</div>

What does your config look like?

---

<div class="post-metadata">

**Author:** ![marcmga](https://avatars.discourse-cdn.com/v4/letter/m/3bc359/32.png) [@marcmga](https://discuss.elastic.co/u/marcmga)\
**Post date:** [December 21, 2016, 8:57am UTC](https://discuss.elastic.co/t/logstash-stops-often/69135/3 "2016-12-21T08:57:03Z")

</div>

[http://pastebin.com/znbUE2MB](http://pastebin.com/znbUE2MB)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 18, 2017, 8:57am UTC](https://discuss.elastic.co/t/logstash-stops-often/69135/4 "2017-01-18T08:57:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.