# Logstash stops unexpectedly

**URL:** <https://discuss.elastic.co/t/logstash-stops-unexpectedly/53583>\
**Category:** Logstash\
**Created:** [June 21, 2016, 10:36pm UTC](https://discuss.elastic.co/t/logstash-stops-unexpectedly/53583 "2016-06-21T22:36:31Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![nanshan](https://avatars.discourse-cdn.com/v4/letter/n/858c86/32.png) [@nanshan](https://discuss.elastic.co/u/nanshan)\
**Post date:** [June 21, 2016, 10:36pm UTC](https://discuss.elastic.co/t/logstash-stops-unexpectedly/53583/1 "2016-06-21T22:36:31Z")

</div>

`22:33:34 dev-ore-logstash-i-fa73bf55 root ~ > service logstash status logstash is running 22:33:35 dev-ore-logstash-i-fa73bf55 root ~ > service logstash status logstash is not running 22:33:36 dev-ore-logstash-i-fa73bf55 root ~ > service logstash status logstash is not running`

here is how I install logstash in chef:

+bash 'install and start logstash' do

- code \<\<-EOF
- cd /tmp
- curl -L -O [https://download.elastic.co/logstash/logstash/packages/debian/logstash\_2.3.2-1\_all.deb](https://download.elastic.co/logstash/logstash/packages/debian/logstash_2.3.2-1_all.deb)
- sudo dpkg -i logstash\_2.3.2-1\_all.deb
- 

```
 EOF

```

- not\_if do ::File.exists?('/opt/logstash/bin/logstash') end
- notifies :start, 'service[logstash]', :delayed
- 

+end  
+  
+service 'logstash' do

- provider Chef::Provider::Service::Init::Debian
- supports :status =\> true, :restart =\> true, :reload =\> true
- action [:enable, :start]  
+end

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [July 4, 2016, 6:50pm UTC](https://discuss.elastic.co/t/logstash-stops-unexpectedly/53583/2 "2016-07-04T18:50:24Z")

</div>

Anything in the Logstash logs?

---

<div class="post-metadata">

**Author:** ![nanshan](https://avatars.discourse-cdn.com/v4/letter/n/858c86/32.png) [@nanshan](https://discuss.elastic.co/u/nanshan)\
**Post date:** [July 5, 2016, 7:02pm UTC](https://discuss.elastic.co/t/logstash-stops-unexpectedly/53583/3 "2016-07-05T19:02:59Z")

</div>

It got fixed by increating heap size and adding more logstash hosts

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:49am UTC](https://discuss.elastic.co/t/logstash-stops-unexpectedly/53583/4 "2017-07-06T04:49:23Z")

</div>