# Syslog Output Plugin

**URL:** <https://discuss.elastic.co/t/syslog-output-plugin/205039>\
**Category:** Logstash\
**Created:** [October 24, 2019, 9:58am UTC](https://discuss.elastic.co/t/syslog-output-plugin/205039 "2019-10-24T09:58:01Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jforsain](https://avatars.discourse-cdn.com/v4/letter/j/85f322/32.png) [@jforsain](https://discuss.elastic.co/u/jforsain)\
**Post date:** [October 24, 2019, 9:58am UTC](https://discuss.elastic.co/t/syslog-output-plugin/205039/1 "2019-10-24T09:58:01Z")

</div>

Hello,

I'm using the syslog output plugin in my Logatsh file conf, but during the execution ( **/usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/apache.conf** ) of the logstash conf file, it shows multiple errors :

_[ERROR] 2019-10-24 11:17:54.088 [Converge PipelineAction::Create] registry - Problems loading a plugin with {:type=\>"output", :name=\>"syslog", :path=\>"logstash/outputs/syslog", :error\_message=\>"LogStash::Plugins::Registry::UnknownPlugin", :error\_class=\>LogStash::Plugins::Registry::UnknownPlugin, :error\_backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/plugins/registry.rb:256:in `namespace_lookup'", "/usr/share/logstash/logstash-core/lib/logstash/plugins/registry.rb:182:in`legacy\_lookup'", "/usr/share/logstash/logstash-core/lib/logstash/plugins/registry.rb:156:in `block in lookup'", "org/jruby/ext/thread/Mutex.java:165:in`synchronize'", "/usr/share/logstash/logstash-core/lib/logstash/plugins/registry.rb:152:in `lookup'", "/usr/share/logstash/logstash-core/lib/logstash/plugins/registry.rb:206:in`lookup\_pipeline\_plugin'", "/usr/share/logstash/logstash-core/lib/logstash/plugin.rb:137:in `lookup'", "org/logstash/plugins/PluginFactoryExt.java:200:in`plugin'", "org/logstash/plugins/PluginFactoryExt.java:184:in `plugin'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:71:in`plugin'", "(eval):16:in `initialize'", "org/jruby/RubyKernel.java:1061:in`eval'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:49:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:90:in`initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline\_action/create.rb:43:in `block in execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:96:in`block in exclusive'", "org/jruby/ext/thread/Mutex.java:165:in `synchronize'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:96:in`exclusive'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline\_action/create.rb:39:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:334:in`block in converge\_state'"]}_

_[ERROR] 2019-10-24 11:17:54.100 [Converge PipelineAction::Create] agent - Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::PluginLoadingError", :message=\>"Couldn't find any output plugin named 'syslog'. Are you sure this is correct? Trying to load the syslog output plugin resulted in this error: Problems loading the requested plugin named syslog of type output. Error: LogStash::Plugins::Registry::UnknownPlugin LogStash::Plugins::Registry::UnknownPlugin", :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/plugins/registry.rb:211:in `lookup_pipeline_plugin'", "/usr/share/logstash/logstash-core/lib/logstash/plugin.rb:137:in`lookup'", "org/logstash/plugins/PluginFactoryExt.java:200:in `plugin'", "org/logstash/plugins/PluginFactoryExt.java:184:in`plugin'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:71:in `plugin'", "(eval):16:in`initialize'", "org/jruby/RubyKernel.java:1061:in `eval'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:49:in`initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:90:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:43:in`block in execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:96:in `block in exclusive'", "org/jruby/ext/thread/Mutex.java:165:in`synchronize'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:96:in `exclusive'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:39:in`execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:334:in `block in converge\_state'"]}_

I've however installed syslog output plugin, following the official documentation ([https://www.elastic.co/guide/en/logstash/current/plugins-outputs-syslog.html](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-syslog.html)) and I've checked if it was installed with the "bin/logstash-plugin list --verbose" command

Here is the output :

logstash-codec-cef (5.0.6)  
logstash-codec-collectd (3.0.8)  
logstash-codec-dots (3.0.6)  
logstash-codec-edn (3.0.6)  
...  
logstash-output-stdout (3.1.4)  
**logstash-output-syslog (3.0.5)**

Here is the conf file :

#input  
input {  
beats {  
port =\> 5044  
}  
}

#output  
output {  
stdout {  
codec =\> rubydebug  
}  
syslog {  
host =\> "192.168.205.206"  
port =\> 514  
protocol =\> "udp"  
}  
}

The version of logsatsh running is 6.8.4

Could you please help me ? 🙂

Regards,

Jean-Luc

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 21, 2019, 9:58am UTC](https://discuss.elastic.co/t/syslog-output-plugin/205039/2 "2019-11-21T09:58:07Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
