# Unrecognized service

**URL:** <https://discuss.elastic.co/t/unrecognized-service/126231>\
**Category:** Logstash\
**Created:** [March 30, 2018, 1:16pm UTC](https://discuss.elastic.co/t/unrecognized-service/126231 "2018-03-30T13:16:46Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![nadine](https://avatars.discourse-cdn.com/v4/letter/n/7cd45c/32.png) [@nadine](https://discuss.elastic.co/u/nadine)\
**Post date:** [March 30, 2018, 1:16pm UTC](https://discuss.elastic.co/t/unrecognized-service/126231/1 "2018-03-30T13:16:46Z")

</div>

I'm a begginer in ELK.  
When i execute " service logstash configtest " I get this error message: "logstash: unrecognized service"  
Although the logstash in already running.  
This is my configuration :

input {  
file {  
path =\> "~/Bureau/log1.log"  
type =\> "bind"  
start\_position =\> "beginning"  
sincedb\_path =\> "/dev/null"  
}  
}

filter {  
if [type] == "bind" {  
grok {  
patterns\_dir =\> "./patterns"  
match =\> { "message" =\> "%{BINDT:timestamp} queries: client %{IP:ipaddress}#[0-9]{5} (%{HOSTNAME}): query: %{HOST:domain} IN %{DNSQUERY:query\_type} (%{IP:ipaddress})" }  
}  
date {  
match =\> ["timestamp", "dd-MMM-YYYY HH:mm:ss.SSS"]  
}  
}  
}

output {  
elasticsearch { hosts =\> ["localhost:9200"]  
}  
}

I would be grateful if you could help me.

---

<div class="post-metadata">

**Author:** ![vinodr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vinodr/32/28759_2.png) [@vinodr](https://discuss.elastic.co/u/vinodr)\
**Post date:** [March 30, 2018, 3:53pm UTC](https://discuss.elastic.co/t/unrecognized-service/126231/2 "2018-03-30T15:53:58Z")

</div>

> [@Service logstash configtest gone](https://discuss.elastic.co/t/service-logstash-configtest-gone/64488):
>
> In pre 5.0 instances of logstash, after making changes to a config file it was possible to run: service logstash configtest After updating to version 5, this no longer works and returns back: The service command supports only basic LSB actions (start, stop, restart, try-restart, reload, force-reload, status). For other actions, please try to use systemctl. This is on CentOS 7 running logstash 5.0 Does anyone know the new syntax? I searched through the version 5 documentation for "configtest…

---

<div class="post-metadata">

**Author:** ![nadine](https://avatars.discourse-cdn.com/v4/letter/n/7cd45c/32.png) [@nadine](https://discuss.elastic.co/u/nadine)\
**Post date:** [March 30, 2018, 4:07pm UTC](https://discuss.elastic.co/t/unrecognized-service/126231/3 "2018-03-30T16:07:07Z")

</div>

when i use /path/to/logstash -t -f /etc/logstash/conf.d

=\> bash: / path / to / logstash: No file or folder of this type

---

<div class="post-metadata">

**Author:** ![vinodr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vinodr/32/28759_2.png) [@vinodr](https://discuss.elastic.co/u/vinodr)\
**Post date:** [March 30, 2018, 5:22pm UTC](https://discuss.elastic.co/t/unrecognized-service/126231/4 "2018-03-30T17:22:34Z")

</div>

@nadine Please update the paths in the command to actual directory paths of logstash service and configuration file.

---

<div class="post-metadata">

**Author:** ![nadine](https://avatars.discourse-cdn.com/v4/letter/n/7cd45c/32.png) [@nadine](https://discuss.elastic.co/u/nadine)\
**Post date:** [March 30, 2018, 6:13pm UTC](https://discuss.elastic.co/t/unrecognized-service/126231/5 "2018-03-30T18:13:35Z")

</div>

How can i do it ? Thank u .

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 27, 2018, 6:13pm UTC](https://discuss.elastic.co/t/unrecognized-service/126231/6 "2018-04-27T18:13:43Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.