# Unable to configure filebeat when output is set to logstash

**URL:** <https://discuss.elastic.co/t/unable-to-configure-filebeat-when-output-is-set-to-logstash/110349>\
**Category:** Logstash\
**Created:** [December 5, 2017, 12:54pm UTC](https://discuss.elastic.co/t/unable-to-configure-filebeat-when-output-is-set-to-logstash/110349 "2017-12-05T12:54:37Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Devendra\_Date](https://avatars.discourse-cdn.com/v4/letter/d/9fc348/32.png) [@Devendra\_Date](https://discuss.elastic.co/u/Devendra_Date)\
**Post date:** [December 5, 2017, 12:54pm UTC](https://discuss.elastic.co/t/unable-to-configure-filebeat-when-output-is-set-to-logstash/110349/1 "2017-12-05T12:54:37Z")

</div>

Hi,  
I am creating 3 node cluster with ELK also installing filebeat on another server with predefined nginx logs to pass. While using Elasticsearch as an output in filebeat.yml file I am able to pass all logs successfully to elasticsearch and then to kibana. Then I changed the output to Logstash in filebeat.yml then I am getting an error,

Here's my **test.conf** file in **/etc/logstash/conf.d** folder

_input {_  
\_ beats {\_  
\_ port =\> 5044\_  
\_ }\_  
_}_  
_output {_  
\_ elasticsearch {\_  
\_ hosts =\> ["10.1.1.47:9200"]\_  
\_ index =\> "nginx-%{+YYYY.MM.dd}"\_  
\_ }\_  
_}_

I have added output in **filebeat.yml** as

_output.logstash:_  
\_ hosts: ["10.1.1 I :5044"]\_

After that when i do this,

**/usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/test.conf**

gives me this error,  
_WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults_  
_Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs errors to the console_

then i added --path.settings as,

**/usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/test.conf --path.settings /etc/logstash**

then i am getting this logs in /var/log/logstash/logstash-plain.log

_[root@master centos]# tail -f /var/log/logstash/logstash-plain.log_  
\_ at org.jruby.ir.interpreter.StartupInterpreterEngine.interpret(StartupInterpreterEngine.java:73) [?:?]\_  
\_ at org.jruby.ir.interpreter.Interpreter.INTERPRET\_BLOCK(Interpreter.java:132) [?:?]\_  
\_ at org.jruby.runtime.MixedModeIRBlockBody.commonYieldPath(MixedModeIRBlockBody.java:148) [?:?]\_  
\_ at org.jruby.runtime.IRBlockBody.call(IRBlockBody.java:73) [?:?]\_  
\_ at org.jruby.runtime.Block.call(Block.java:124) [?:?]\_  
\_ at org.jruby.RubyProc.call(RubyProc.java:289) [?:?]\_  
\_ at org.jruby.RubyProc.call(RubyProc.java:246) [?:?]\_  
\_ at org.jruby.internal.runtime.RubyRunnable.run(RubyRunnable.java:104) [?:?]\_  
\_ at java.lang.Thread.run(Thread.java:748) [?:1.8.0\_151]\_  
_[2017-12-05T12:42:11,997][DEBUG][logstash.pipeline] Pushing flush onto pipeline {:pipeline\_id=\>"main", :thread=\>"#\<Thread:0x53c8049c@/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:290 sleep\>"}_  
_[2017-12-05T12:42:13,928][ERROR][logstash.pipeline] A plugin had an unrecoverable error. Will restart this plugin._  
\_ Pipeline\_id:main\_  
\_ Plugin: \<LogStash::Inputs::Beats port=\>5044, id=\>"9bb67ac3ef5bf1f5c137746a3980352ccd9c43b1e497717a4e5bad712b1e5b4a", enable\_metric=\>true, codec=\>\<LogStash::Codecs::Plain id=\>"plain\_6b561c66-6e66-4b4f-80ee-a6967d9379fb", enable\_metric=\>true, charset=\>"UTF-8"\>, host=\>"0.0.0.0", ssl=\>false, ssl\_verify\_mode=\>"none", include\_codec\_tag=\>true, ssl\_handshake\_timeout=\>10000, tls\_min\_version=\>1, tls\_max\_version=\>1.2, cipher\_suites=\>["TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384", "TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384", "TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256", "TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256", "TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_CBC\_SHA384", "TLS\_ECDHE\_RSA\_WITH\_AES\_256\_CBC\_SHA384", "TLS\_ECDHE\_RSA\_WITH\_AES\_128\_CBC\_SHA256", "TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_CBC\_SHA256"], client\_inactivity\_timeout=\>60\>\_  
\_ Error: event executor terminated\_  
\_ Exception: Java::JavaUtilConcurrent::RejectedExecutionException\_  
org.jruby.runtime.MixedModeIRBlockBody.commonYieldPath(MixedModeIRBlockBody.java:148) [?:?]\_  
\_ at org.jruby.runtime.IRBlockBody.call(IRBlockBody.java:73) [?:?]\_  
\_ at org.jruby.runtime.Block.call(Block.java:124) [?:?]\_  
\_ at org.jruby.RubyProc.call(RubyProc.java:289) [?:?]\_  
\_ at org.jruby.RubyProc.call(RubyProc.java:246) [?:?]\_  
\_ at org.jruby.internal.runtime.RubyRunnable.run(RubyRunnable.java:104) [?:?]\_  
\_ at java.lang.Thread.run(Thread.java:748) [?:1.8.0\_151]\_  
_[2017-12-05T12:42:14,930][ERROR][io.netty.util.concurrent.DefaultPromise.rejectedExecution] Failed to submit a listener notification task. Event loop shut down?_  
_java.util.concurrent.RejectedExecutionException: event executor terminated_  
\_ at io.netty.util.concurrent.SingleThreadEventExecutor.reject(SingleThreadEventExecutor.java:840) ~[netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at io.netty.util.concurrent.SingleThreadEventExecutor.offerTask(SingleThreadEventExecutor.java:342) ~[netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at io.netty.util.concurrent.SingleThreadEventExecutor.addTask(SingleThreadEventExecutor.java:335) ~[netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at io.netty.util.concurrent.SingleThreadEventExecutor.execute(SingleThreadEventExecutor.java:765) ~[netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at io.netty.util.concurrent.DefaultPromise.safeExecute(DefaultPromise.java:767) [netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at io.netty.util.concurrent.DefaultPromise.notifyListeners(DefaultPromise.java:435) [netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at io.netty.util.concurrent.DefaultPromise.trySuccess(DefaultPromise.java:111) [netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at io.netty.channel.DefaultChannelPromise.trySuccess(DefaultChannelPromise.java:82) [netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at io.netty.channel.AbstractChannel$CloseFuture.setClosed(AbstractChannel.java:1062) [netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at io.netty.channel.AbstractChannel$AbstractUnsafe.register(AbstractChannel.java:486) [netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at io.netty.channel.SingleThreadEventLoop.register(SingleThreadEventLoop.java:80) [netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at io.netty.channel.SingleThreadEventLoop.register(SingleThreadEventLoop.java:74) [netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at io.netty.channel.MultithreadEventLoopGroup.register(MultithreadEventLoopGroup.java:85) [netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at io.netty.bootstrap.AbstractBootstrap.initAndRegister(AbstractBootstrap.java:330) [netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at io.netty.bootstrap.AbstractBootstrap.doBind(AbstractBootstrap.java:281) [netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at io.netty.bootstrap.AbstractBootstrap.bind(AbstractBootstrap.java:277) [netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at io.netty.bootstrap.AbstractBootstrap.bind(AbstractBootstrap.java:259) [netty-all-4.1.3.Final.jar:4.1.3.Final]\_  
\_ at org.logstash.beats.Server.listen(Server.java:66) [logstash-input-beats-5.0.2.jar:?]\_  
\_ at sun.reflect.GeneratedMethodAccessor30.invoke(Unknown Source) ~[?:?]\_  
\_ at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0\_151]\_  
\_ at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0\_151]\_

any help is appreciated. Thank you

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 2, 2018, 12:55pm UTC](https://discuss.elastic.co/t/unable-to-configure-filebeat-when-output-is-set-to-logstash/110349/2 "2018-01-02T12:55:02Z")

</div>

Closed on January 2, 2018, 12:55pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.