# Running Logstash as a service spawns different processes

**URL:** <https://discuss.elastic.co/t/running-logstash-as-a-service-spawns-different-processes/68641>\
**Category:** Logstash\
**Created:** [December 11, 2016, 12:05pm UTC](https://discuss.elastic.co/t/running-logstash-as-a-service-spawns-different-processes/68641 "2016-12-11T12:05:44Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![gupta.yuvraj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gupta.yuvraj/32/7550_2.png) [@gupta.yuvraj](https://discuss.elastic.co/u/gupta.yuvraj)\
**Post date:** [December 11, 2016, 12:05pm UTC](https://discuss.elastic.co/t/running-logstash-as-a-service-spawns-different-processes/68641/1 "2016-12-11T12:05:44Z")

</div>

When running logstash as a service on Ubuntu 14.04 using following command:-

sudo initctl start logstash

Observing that a new logstash process is spawned after every 15 seconds.

If logstash has started with process id 1025, then after 15 seconds the process id is different from 1025 and subsequently process id's keep on changing.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 12, 2016, 2:41am UTC](https://discuss.elastic.co/t/running-logstash-as-a-service-spawns-different-processes/68641/2 "2016-12-12T02:41:58Z")

</div>

Sounds like it's not starting properly, so init is respawning it. Check the LS logs for why.

---

<div class="post-metadata">

**Author:** ![gupta.yuvraj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gupta.yuvraj/32/7550_2.png) [@gupta.yuvraj](https://discuss.elastic.co/u/gupta.yuvraj)\
**Post date:** [December 12, 2016, 2:17pm UTC](https://discuss.elastic.co/t/running-logstash-as-a-service-spawns-different-processes/68641/3 "2016-12-12T14:17:06Z")

</div>

There was some error in logs due to which it kept respawning it.  
It would be better if this could somewhere be mentioned in the docs so that users do not suspect anything wrong with it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 9, 2017, 2:17pm UTC](https://discuss.elastic.co/t/running-logstash-as-a-service-spawns-different-processes/68641/4 "2017-01-09T14:17:06Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.