Logstash won't start after clean shutdown

Elastic Stack Logstash
1

After we upgraded to ELK version 7.0.1
Everytime when we shutdown logstash it won't start until I reboot the machine

Here is the message. There is no other log gets register in log file. It is so annoying.
just simple "systemctl stop logstash.service" and then try to start fails, without any changes.

Loaded: loaded (/etc/systemd/system/logstash.service; enabled; vendor preset: disabled)
Active: failed (Result: start-limit) since Thu 2019-05-09 22:16:18 AWST; 10s ago
Process: 4704 ExecStart=/usr/share/logstash/bin/logstash --path.settings /etc/logstash (code=exited, status=1/FAILURE)
Main PID: 4704 (code=exited, status=1/FAILURE)

May 09 22:16:17 elkm01 systemd[1]: Unit logstash.service entered failed state.
May 09 22:16:17 elkm01 systemd[1]: logstash.service failed.
May 09 22:16:18 elkm01 systemd[1]: logstash.service holdoff time over, scheduling restart.
May 09 22:16:18 elkm01 systemd[1]: start request repeated too quickly for logstash.service
May 09 22:16:18 elkm01 systemd[1]: Failed to start logstash.
May 09 22:16:18 elkm01 systemd[1]: Unit logstash.service entered failed state.
May 09 22:16:18 elkm01 systemd[1]: logstash.service failed.

Did I miss some configuration after update?
once system reboots it starts up automatically.

2

What is in the logstash log?

3

No log is being generated at all.

But figure out what is causing this. it is weired. but I test it few time.
if I have swap off. i.e no swap at all. then it fails, not 100% every time. but it does most time.

Now if I turn on swap and does restart logstash it work all the time.
we had a swap on and that is why I never seen this problem.

But along the line when we show the recomendation from ELK that swap needs to be off hence we did turn it off without through testing.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.