# Newbie: Logstash clean install -\> 30% cpu? **URL:** \ **Category:** Elasticsearch\ **Created:** [June 28, 2014, 11:03pm UTC](https://discuss.elastic.co/t/newbie-logstash-clean-install-30-cpu/18383 "2014-06-28T23:03:51Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Andre\_van\_der\_Wiel](https://avatars.discourse-cdn.com/v4/letter/a/e56c9b/32.png) [@Andre\_van\_der\_Wiel](https://discuss.elastic.co/u/Andre_van_der_Wiel)\ **Post date:** [June 28, 2014, 11:03pm UTC](https://discuss.elastic.co/t/newbie-logstash-clean-install-30-cpu/18383/1 "2014-06-28T23:03:51Z")
Installed ES and Logstash but the logstash process consumes 30 % cpu ! I stopped Logstash and cpu returns to normal use. Did a reboot, cpu again up to 30%. Now I can stop logstash but cpu stays high. There are 2 jobs running: /usr/bin/java -Djava.io.tmpdir=/var/lib/logstash etc. When I kill these jobs logstash does a auto restart I also cannot apt-get remove Logstash with normal apt-get remove. 1. Why is the cpu so high when Logstash is doing nothing? 2. Why can't stop the process(es) or remove Logstash? 3. in logfile: "Error: No config files found: /etc/logstash/conf.d/\*\ 4. What am I doeing wrong? Installprocess on Ubuntu 14.04: sudo su wget -O - [http://packages.elasticsearch.org/GPG-KEY-elasticsearch](http://packages.elasticsearch.org/GPG-KEY-elasticsearch) | apt-key add - vi /etc/apt/sources.list deb [http://packages.elasticsearch.org/elasticsearch/1.1/debian](http://packages.elasticsearch.org/elasticsearch/1.1/debian) stable main deb [http://packages.elasticsearch.org/logstash/1.4/debian](http://packages.elasticsearch.org/logstash/1.4/debian) stable main apt-get update apt-get upgrade apt-get install elasticsearch apt-get install logstash apt-get install openjdk-7-jre-headless update-rc.d elasticsearch defaults 95 10 sudo /etc/init.d/elasticsearch start sudo /etc/init.d/logstash start -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/c897de82-e069-4425-a089-1f415e2bac23%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/c897de82-e069-4425-a089-1f415e2bac23%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 28, 2014, 11:40pm UTC](https://discuss.elastic.co/t/newbie-logstash-clean-install-30-cpu/18383/2 "2014-06-28T23:40:18Z")
You should really ask that over on the Logstash list đŸ™‚ [https://groups.google.com/forum/#!forum/logstash-users](https://groups.google.com/forum/#!forum/logstash-users) Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: [markw@campaignmonitor.com](mailto:markw@campaignmonitor.com) web: [www.campaignmonitor.com](http://www.campaignmonitor.com) On 29 June 2014 09:03, AndrĂ© van der Wiel [awiel@scapeler.com](mailto:awiel@scapeler.com) wrote: > Installed ES and Logstash but the logstash process consumes 30 % cpu ! > I stopped Logstash and cpu returns to normal use. > Did a reboot, cpu again up to 30%. Now I can stop logstash but cpu stays > high. There are 2 jobs running: /usr/bin/java > -Djava.io.tmpdir=/var/lib/logstash etc. When I kill these jobs logstash > does a auto restart > I also cannot apt-get remove Logstash with normal apt-get remove. > > 1. Why is the cpu so high when Logstash is doing nothing? > 2. Why can't stop the process(es) or remove Logstash? > 3. in logfile: "Error: No config files found: /etc/logstash/conf.d/\*\ > 4. What am I doeing wrong? > > Installprocess on Ubuntu 14.04: > sudo su > wget -O - [http://packages.elasticsearch.org/GPG-KEY-elasticsearch](http://packages.elasticsearch.org/GPG-KEY-elasticsearch) | > apt-key add - > > vi /etc/apt/sources.list > deb [http://packages.elasticsearch.org/elasticsearch/1.1/debian](http://packages.elasticsearch.org/elasticsearch/1.1/debian) stable main > deb [http://packages.elasticsearch.org/logstash/1.4/debian](http://packages.elasticsearch.org/logstash/1.4/debian) stable main > > apt-get update > apt-get upgrade > apt-get install elasticsearch > apt-get install logstash > apt-get install openjdk-7-jre-headless > update-rc.d elasticsearch defaults 95 10 > sudo /etc/init.d/elasticsearch start > sudo /etc/init.d/logstash start > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/c897de82-e069-4425-a089-1f415e2bac23%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/c897de82-e069-4425-a089-1f415e2bac23%40googlegroups.com) > [https://groups.google.com/d/msgid/elasticsearch/c897de82-e069-4425-a089-1f415e2bac23%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/c897de82-e069-4425-a089-1f415e2bac23%40googlegroups.com?utm_medium=email&utm_source=footer) > . > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEM624a3%2BH0gB7A48jfBbQMXa0-m%3DqW4Z5QgON%3De8Ah0w1zHHg%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEM624a3%2BH0gB7A48jfBbQMXa0-m%3DqW4Z5QgON%3De8Ah0w1zHHg%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Andre\_van\_der\_Wiel](https://avatars.discourse-cdn.com/v4/letter/a/e56c9b/32.png) [@Andre\_van\_der\_Wiel](https://discuss.elastic.co/u/Andre_van_der_Wiel)\ **Post date:** [June 29, 2014, 5:21am UTC](https://discuss.elastic.co/t/newbie-logstash-clean-install-30-cpu/18383/3 "2014-06-29T05:21:04Z")
Thanks, post moved to logstash-users forum. AndrĂ© Op zondag 29 juni 2014 01:41:06 UTC+2 schreef Mark Walkom: > You should really ask that over on the Logstash list đŸ™‚ > [Redirecting to Google Groups](https://groups.google.com/forum/#!forum/logstash-users) > > Regards, > Mark Walkom > > Infrastructure Engineer > Campaign Monitor > email: [ma...@campaignmonitor.com](mailto:ma...@campaignmonitor.com) \ > web: [www.campaignmonitor.com](http://www.campaignmonitor.com) > > On 29 June 2014 09:03, AndrĂ© van der Wiel \<[aw...@scapeler.com](mailto:aw...@scapeler.com) > \\> wrote: > > > Installed ES and Logstash but the logstash process consumes 30 % cpu ! > > I stopped Logstash and cpu returns to normal use. > > Did a reboot, cpu again up to 30%. Now I can stop logstash but cpu stays > > high. There are 2 jobs running: /usr/bin/java > > -Djava.io.tmpdir=/var/lib/logstash etc. When I kill these jobs logstash > > does a auto restart > > I also cannot apt-get remove Logstash with normal apt-get remove. > > > > 1. Why is the cpu so high when Logstash is doing nothing? > > 2. Why can't stop the process(es) or remove Logstash? > > 3. in logfile: "Error: No config files found: /etc/logstash/conf.d/\*\ > > 4. What am I doeing wrong? > > > > Installprocess on Ubuntu 14.04: > > sudo su > > wget -O - [http://packages.elasticsearch.org/GPG-KEY-elasticsearch](http://packages.elasticsearch.org/GPG-KEY-elasticsearch) | > > apt-key add - > > > > vi /etc/apt/sources.list > > deb [http://packages.elasticsearch.org/elasticsearch/1.1/debian](http://packages.elasticsearch.org/elasticsearch/1.1/debian) stable > > main > > deb [http://packages.elasticsearch.org/logstash/1.4/debian](http://packages.elasticsearch.org/logstash/1.4/debian) stable main > > > > apt-get update > > apt-get upgrade > > apt-get install elasticsearch > > apt-get install logstash > > apt-get install openjdk-7-jre-headless > > update-rc.d elasticsearch defaults 95 10 > > sudo /etc/init.d/elasticsearch start > > sudo /etc/init.d/logstash start > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/c897de82-e069-4425-a089-1f415e2bac23%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/c897de82-e069-4425-a089-1f415e2bac23%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/c897de82-e069-4425-a089-1f415e2bac23%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/c897de82-e069-4425-a089-1f415e2bac23%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/bfee3628-a93f-43d3-8e40-459a24ebc6a3%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/bfee3628-a93f-43d3-8e40-459a24ebc6a3%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:19am UTC](https://discuss.elastic.co/t/newbie-logstash-clean-install-30-cpu/18383/4 "2017-07-06T01:19:10Z")