# Run Daemon Logstash

**URL:** <https://discuss.elastic.co/t/run-daemon-logstash/56384>\
**Category:** Logstash\
**Created:** [July 26, 2016, 10:44am UTC](https://discuss.elastic.co/t/run-daemon-logstash/56384 "2016-07-26T10:44:45Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![hatienkma](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hatienkma/32/11066_2.png) [@hatienkma](https://discuss.elastic.co/u/hatienkma)\
**Post date:** [July 26, 2016, 10:44am UTC](https://discuss.elastic.co/t/run-daemon-logstash/56384/1 "2016-07-26T10:44:45Z")

</div>

The same thread name. I have problem via Logstash when starting.

I want to insert logfile (eve.json) from Suricata to Etaslicsearch. I have use Logstash to import.

When i enter command: "/opt/logstash/bin/logstash -f /etc/logstash/conf.d/suricata.conf"  
It's working.

I have 2 solutions need help:

1. How to run command with daemon mode?  
"/opt/logstash/bin/logstash -f /etc/logstash/conf.d/suricata.conf"

2. How to start file "/etc/logstash/conf.d/suricata.conf" when Logstash run?

Thanks.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 26, 2016, 10:54am UTC](https://discuss.elastic.co/t/run-daemon-logstash/56384/2 "2016-07-26T10:54:43Z")

</div>

Install LS using a DEB or an RPM, that'll handle all of that for you.

---

<div class="post-metadata">

**Author:** ![hatienkma](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hatienkma/32/11066_2.png) [@hatienkma](https://discuss.elastic.co/u/hatienkma)\
**Post date:** [July 26, 2016, 11:00am UTC](https://discuss.elastic.co/t/run-daemon-logstash/56384/3 "2016-07-26T11:00:38Z")

</div>

This step i setup Logstash.

### Setup Logstash

cd /home/

echo '[logstash-2.2]  
name=logstash repository for 2.2 packages  
baseurl=http://packages.elasticsearch.org/logstash/2.2/centos  
gpgcheck=1  
gpgkey=http://packages.elasticsearch.org/GPG-KEY-elasticsearch  
enabled=1' | sudo tee /etc/yum.repos.d/logstash.repo

## yum -y install logstash

---

<div class="post-metadata">

**Author:** ![hatienkma](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hatienkma/32/11066_2.png) [@hatienkma](https://discuss.elastic.co/u/hatienkma)\
**Post date:** [July 26, 2016, 11:04am UTC](https://discuss.elastic.co/t/run-daemon-logstash/56384/4 "2016-07-26T11:04:13Z")

</div>

Hi all,

I have resolve my problem.

Edit file: /etc/rc.d/init.d/logstash

## -- LS\_USER=root LS\_GROUP=root

Yeah :D.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:46am UTC](https://discuss.elastic.co/t/run-daemon-logstash/56384/5 "2017-07-06T04:46:28Z")

</div>