# Unable to install log4j2 plugin into Logstash **URL:** \ **Category:** Logstash\ **Created:** [January 30, 2019, 8:31pm UTC](https://discuss.elastic.co/t/unable-to-install-log4j2-plugin-into-logstash/166428 "2019-01-30T20:31:13Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![john.jensen](https://avatars.discourse-cdn.com/v4/letter/j/2bfe46/32.png) [@john.jensen](https://discuss.elastic.co/u/john.jensen)\ **Post date:** [January 30, 2019, 8:31pm UTC](https://discuss.elastic.co/t/unable-to-install-log4j2-plugin-into-logstash/166428/1 "2019-01-30T20:31:13Z")
I'm trying to use log4j2 to send messages to our Logstash instance. I'm running this command: bin\logstash -r -p "C:\elasticsearch\_course\logstash-input-log4j2" -f "C:\elasticsearch\_course\logstash\_data\test.conf" The test.conf file: input { log4j2 { port =\> 7000 mode =\> "server" } file { path =\> "D:/logs/application.log" sincedb\_path =\> "nul" start\_position =\> "beginning" } } filter { grok { match =\> { "message" =\> "%{NOTSPACE:date} %{NOTSPACE:time} %{WORD:level} %{NUMBER:FIELD1} %{NOTSPACE:FIELD2} %{NOTSPACE:FIELD3} %{NOTSPACE:class}%{SPACE}%{NOTSPACE:FIELD4} %{WORD:method}" } remove\_field =\> ["FIELD1","FIELD2","FIELD3","FIELD4"] } } output { stdout { codec =\> rubydebug } elasticsearch { hosts =\> ["localhost:9200"] index =\> "gopher-%{+YYYY.MM.dd}" manage\_template =\> true template =\> "C:\elasticsearch\_course\logstash\_data\gopher\_mapping.json" template\_name =\> "gopher\_template" } } I'm getting the following error: Validating logstash-input-log4j2 Installing logstash-input-log4j2 Plugin version conflict, aborting ERROR: Installation Aborted, message: Bundler could not find compatible versions for gem "logstash-core": In snapshot (Gemfile.lock): logstash-core (= 6.6.0) In Gemfile: logstash-core-plugin-api (\>= 0) java depends on logstash-core (= 6.6.0) java ``` logstash-input-syslog (>= 0) java depends on logstash-filter-grok (>= 0) java depends on logstash-core (>= 5.6.0) java logstash-input-log4j2 (>= 0) java depends on logstash-core (< 2.0.0, >= 1.4.0) java logstash-core (>= 0) java ``` Running `bundle update` will rebuild your snapshot from scratch, using only the gems in your Gemfile, which may resolve the conflict. Bundler could not find compatible versions for gem "logstash": In Gemfile: logstash-input-log4j2 (\>= 0) java depends on logstash (\< 2.0.0, \>= 1.4.0) java Could not find gem 'logstash (\< 2.0.0, \>= 1.4.0) java', which is required by gem 'logstash-input-log4j2 (\>= 0) java', in any of the sources. I'm using the latest versions of Logstash (6.6.0) and the plugin that I can find. I'm on a Windows machine and don't have much skill with Linux so I'm trying to translate from the references I've seen here and the log4j2 references. How do I install the log4j2 plugin into Logstash on a Windows 10 computer? ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [January 30, 2019, 8:49pm UTC](https://discuss.elastic.co/t/unable-to-install-log4j2-plugin-into-logstash/166428/2 "2019-01-30T20:49:35Z")
> [@john.jensen](#): > > I'm trying to use log4j2 to send messages to our Logstash instance Instead of using a plugin to connect them directly, write to a file and ingest the file using filebeat, or, my preference, configure log4j to write to an event log and ingest using winlogbeat. ---
**Author:** ![john.jensen](https://avatars.discourse-cdn.com/v4/letter/j/2bfe46/32.png) [@john.jensen](https://discuss.elastic.co/u/john.jensen)\ **Post date:** [January 30, 2019, 9:09pm UTC](https://discuss.elastic.co/t/unable-to-install-log4j2-plugin-into-logstash/166428/3 "2019-01-30T21:09:13Z")
That is not acceptable due to project constraints. I need to do this without writing a log file. ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [January 30, 2019, 9:20pm UTC](https://discuss.elastic.co/t/unable-to-install-log4j2-plugin-into-logstash/166428/4 "2019-01-30T21:20:21Z")
OK, you still have other appenders that should be able to connect to logstash. I haven't tried it but how about a socket or http appender with a JsonLayout. ---
**Author:** ![john.jensen](https://avatars.discourse-cdn.com/v4/letter/j/2bfe46/32.png) [@john.jensen](https://discuss.elastic.co/u/john.jensen)\ **Post date:** [January 30, 2019, 9:22pm UTC](https://discuss.elastic.co/t/unable-to-install-log4j2-plugin-into-logstash/166428/5 "2019-01-30T21:22:16Z")
The requirements document specifies this solution. ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [January 30, 2019, 9:40pm UTC](https://discuss.elastic.co/t/unable-to-install-log4j2-plugin-into-logstash/166428/6 "2019-01-30T21:40:46Z")
I feel your pain. Depending on which version you pulled, you have a plugin that was probably last updated 3 years ago, when it was running in logstash 2.1. You are trying to install that in logstash 6.6. Specifically, the messages are telling you that you have version 6.6.0 of the package logstash-core, and logstash-input-log4j2 is compatible with versions 1.4.0 up to 2.0.0. Obviously 6.6.0 is not in that range. So, you would need to build a new version of the plugin that a) Is tagged as being compatible with 6.6.0 (probably a straightforward change) b) Is _actually_ compatible with 6.6.0. I am pretty sure there have been changes in the last 4 major versions that will require changes in the plugin. ---
**Author:** ![john.jensen](https://avatars.discourse-cdn.com/v4/letter/j/2bfe46/32.png) [@john.jensen](https://discuss.elastic.co/u/john.jensen)\ **Post date:** [January 30, 2019, 9:50pm UTC](https://discuss.elastic.co/t/unable-to-install-log4j2-plugin-into-logstash/166428/7 "2019-01-30T21:50:14Z")
So is there another solution I should be looking at? The main requirement was that we pick up the logging message without them being written to a file. If this isn't going to work I need to propose an alternate. ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [January 30, 2019, 10:52pm UTC](https://discuss.elastic.co/t/unable-to-install-log4j2-plugin-into-logstash/166428/8 "2019-01-30T22:52:26Z")
As I said, you may be able to use a socket or http appender with a JsonLayout in the log4j configuration pointed at a tcp or http input. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 27, 2019, 10:52pm UTC](https://discuss.elastic.co/t/unable-to-install-log4j2-plugin-into-logstash/166428/9 "2019-02-27T22:52:29Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.