# Logstash won't start as deamon **URL:** \ **Category:** Logstash\ **Created:** [June 21, 2023, 10:31pm UTC](https://discuss.elastic.co/t/logstash-wont-start-as-deamon/336629 "2023-06-21T22:31:58Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![elasticforme](https://avatars.discourse-cdn.com/v4/letter/e/f05b48/32.png) [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Post date:** [June 21, 2023, 10:31pm UTC](https://discuss.elastic.co/t/logstash-wont-start-as-deamon/336629/1 "2023-06-21T22:31:58Z")
I know I have seen this issue in past and was fixed by using different ls\_temp dir for logstash. but this time it won't work. here is error message. any idea? this dir /s1/log/logstash is wide open ```auto stat /s1/log/logstash/ls_temp File: /s1/log/logstash/ls_temp Size: 6 Blocks: 0 IO Block: 4096 directory Device: 803h/2051d Inode: 133 Links: 2 Access: (0777/drwxrwxrwx) Uid: ( 995/logstash) Gid: ( 992/logstash) ``` ```auto [2023-06-22T00:25:10,595][INFO][logstash.runner] Log4j configuration path used is: /etc/logstash/log4j2.properties [2023-06-22T00:25:10,598][INFO][logstash.runner] Starting Logstash {"logstash.version"=>"8.5.3", "jruby.version"=>"jruby 9.3.9.0 (2.6.8) 2022-10-24 537cd1f8bc OpenJDK 64-Bit Server VM 17.0.5+8 on 17.0.5+8 +jit [x86_64-linux]"} [2023-06-22T00:25:10,600][INFO][logstash.runner] JVM bootstrap flags: [-Xms15g, -Xmx15g, -Djava.io.tmpdir=/s1/log/logstash/ls_temp, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=/var/lib/elasticsearch, -XX:ErrorFile=/var/log/elasticsearch/hs_err_pid%p.log, -Djruby.regexp.interruptible=true, -Djdk.io.File.enableADS=true, --add-exports=jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED, --add-exports=jdk.compiler/com.sun.tools.javac.file=ALL-UNNAMED, --add-exports=jdk.compiler/com.sun.tools.javac.parser=ALL-UNNAMED, --add-exports=jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED, --add-exports=jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED, --add-opens=java.base/java.security=ALL-UNNAMED, --add-opens=java.base/java.io=ALL-UNNAMED, --add-opens=java.base/java.nio.channels=ALL-UNNAMED, --add-opens=java.base/sun.nio.ch=ALL-UNNAMED, --add-opens=java.management/sun.management=ALL-UNNAMED] [2023-06-22T00:25:10,627][FATAL][org.logstash.Logstash] Logstash stopped processing because of an error: (LoadError) Could not load FFI Provider: (NotImplementedError) FFI not available: null See http://jira.codehaus.org/browse/JRUBY-4583 org.jruby.exceptions.LoadError: (LoadError) Could not load FFI Provider: (NotImplementedError) FFI not available: null See http://jira.codehaus.org/browse/JRUBY-4583 at org.jruby.ext.jruby.JRubyUtilLibrary.load_ext(org/jruby/ext/jruby/JRubyUtilLibrary.java:216) ~[jruby.jar:?] at RUBY.
(/usr/share/logstash/vendor/bundle/jruby/2.6.0/gems/ffi-1.15.5-java/lib/ffi.rb:11) ~[?:?] at org.jruby.RubyKernel.require(org/jruby/RubyKernel.java:1017) ~[jruby.jar:?] at RUBY.(/usr/share/logstash/logstash-core/lib/logstash/util/prctl.rb:19) ~[?:?] at RUBY.
(/usr/share/logstash/logstash-core/lib/logstash/util/prctl.rb:18) ~[?:?] at org.jruby.RubyKernel.require(org/jruby/RubyKernel.java:1017) ~[jruby.jar:?] at RUBY.set_thread_name(/usr/share/logstash/logstash-core/lib/logstash/util.rb:36) ~[?:?] at RUBY.execute(/usr/share/logstash/logstash-core/lib/logstash/runner.rb:354) ~[?:?] at RUBY.run(/usr/share/logstash/vendor/bundle/jruby/2.6.0/gems/clamp-1.0.1/lib/clamp/command.rb:68) ~[?:?] at RUBY.run(/usr/share/logstash/logstash-core/lib/logstash/runner.rb:282) ~[?:?] at RUBY.run(/usr/share/logstash/vendor/bundle/jruby/2.6.0/gems/clamp-1.0.1/lib/clamp/command.rb:133) ~[?:?] at usr.share.logstash.lib.bootstrap.environment.
(/usr/share/logstash/lib/bootstrap/environment.rb:90) ~[?:?] Caused by: org.jruby.exceptions.NotImplementedError: (NotImplementedError) FFI not available: null ``` ---
**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\ **Post date:** [June 22, 2023, 7:35am UTC](https://discuss.elastic.co/t/logstash-wont-start-as-deamon/336629/2 "2023-06-22T07:35:28Z")
> [@elasticforme](#): > > `Could not load FFI Provider` [A similar issue](https://discuss.elastic.co/t/logstast-startup-issue/41771) with temp directory ---
**Author:** ![elasticforme](https://avatars.discourse-cdn.com/v4/letter/e/f05b48/32.png) [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Post date:** [June 23, 2023, 12:29pm UTC](https://discuss.elastic.co/t/logstash-wont-start-as-deamon/336629/3 "2023-06-23T12:29:10Z")
Rios, Thanks for pointing out to that link. But I had already try that. turn out to be something in log4j2.properties file. I still don't know what it was. this machine was clone from different logstash. I remove logstash rpm, reinstall and it work. after that I try that old files jvm.options and log4j2.properties and it failed. I have see few difference there. but has no time to check one by one to exactly figure out which one cause the problem. ---
**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\ **Post date:** [June 23, 2023, 2:51pm UTC](https://discuss.elastic.co/t/logstash-wont-start-as-deamon/336629/4 "2023-06-23T14:51:41Z")
Thanks for feedback. "logstash.version"=\>"8.5.3" - this is not too old version Are you sure it's log4j2.properties? Should be there old version if you didn't remove. Maybe are both customized. Sometimes new params has been added in a new version, however should be impact. If you figure out differences/changes in 2 files, please leave info. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 21, 2023, 2:51pm UTC](https://discuss.elastic.co/t/logstash-wont-start-as-deamon/336629/5 "2023-07-21T14:51:51Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.