# Multiple-pipelines

**URL:** <https://discuss.elastic.co/t/multiple-pipelines/109274>\
**Category:** Logstash\
**Created:** [November 27, 2017, 8:19pm UTC](https://discuss.elastic.co/t/multiple-pipelines/109274 "2017-11-27T20:19:42Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![hispeed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hispeed/32/16232_2.png) [@hispeed](https://discuss.elastic.co/u/hispeed)\
**Post date:** [November 27, 2017, 8:19pm UTC](https://discuss.elastic.co/t/multiple-pipelines/109274/1 "2017-11-27T20:19:42Z")

</div>

Hi,

Everything worked on 5.6 so I made a snapshot and updated to V.6.0. All services are running fine.

I have winlogbeat sending logs to logstash and I have a Pfsense and other stuff comming in directly to logstash.  
Do I now use multiple pipelines?

I also use the geolite plugin. At the moment there is nothing configured in logstash.yml. It looks like there a lot of changes in V.6.0.

I get the following error:

> [2017-11-27T20:26:02,621][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"fb\_apache", :directory=\>"/usr/share/logstash/modules/fb\_apache/configuration"}  
> [2017-11-27T20:26:02,625][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"netflow", :directory=\>"/usr/share/logstash/modules/netflow/configuration"}  
> [2017-11-27T20:26:02,948][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified  
> [2017-11-27T20:26:02,977][FATAL][logstash.runner] An unexpected error occurred! {:error=\>java.nio.file.AccessDeniedException: /var/lib/logstash/.lock, :backtrace=\>["sun.nio.fs.UnixException.translateToIOException(sun/nio/fs/UnixException.java:84)", "sun.nio.fs.UnixException.rethrowAsIOException(sun/nio/fs/UnixException.java:102)",

Does anyone has some ideas?

Best Regards,  
Marc

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [November 29, 2017, 6:35am UTC](https://discuss.elastic.co/t/multiple-pipelines/109274/2 "2017-11-29T06:35:53Z")

</div>

> java.nio.file.AccessDeniedException: /var/lib/logstash/.lock

Wrong permissions or ownership of this file or directory?

---

<div class="post-metadata">

**Author:** ![hispeed](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hispeed/32/16232_2.png) [@hispeed](https://discuss.elastic.co/u/hispeed)\
**Post date:** [November 29, 2017, 8:20am UTC](https://discuss.elastic.co/t/multiple-pipelines/109274/3 "2017-11-29T08:20:31Z")

</div>

Hi,

i have the following rights:

> drwxr-xr-x 4 logstash logstash 69 10. Nov 21:03 .  
> drwxr-xr-x. 29 root root 4096 29. Nov 08:02 ..  
> drwxrwxrwx 2 986 984 6 7. Aug 20:59 dead\_letter\_queue  
> -rwxr-xr-x 1 986 984 0 10. Mai 2017 .lock  
> drwxrwxrwx 2 986 984 6 10. Mai 2017 queue  
> -rw-r--r-- 1 986 984 36 13. Feb 2017 uuid

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [November 29, 2017, 8:46am UTC](https://discuss.elastic.co/t/multiple-pipelines/109274/4 "2017-11-29T08:46:53Z")

</div>

The directory is owned by the logstash user (which is expected) but the other files are owned by the user with uid 986. Pick a user to run Logstash as and make sure the file permissions reflect your choice.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 27, 2017, 8:47am UTC](https://discuss.elastic.co/t/multiple-pipelines/109274/5 "2017-12-27T08:47:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.