# Why my logstash keeps on restarting!

**URL:** <https://discuss.elastic.co/t/why-my-logstash-keeps-on-restarting/174535>\
**Category:** Logstash\
**Created:** [March 29, 2019, 12:26pm UTC](https://discuss.elastic.co/t/why-my-logstash-keeps-on-restarting/174535 "2019-03-29T12:26:35Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gomathi\_Meena](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gomathi_meena/32/43086_2.png) [@Gomathi\_Meena](https://discuss.elastic.co/u/Gomathi_Meena)\
**Post date:** [March 29, 2019, 12:26pm UTC](https://discuss.elastic.co/t/why-my-logstash-keeps-on-restarting/174535/1 "2019-03-29T12:26:35Z")

</div>

Hi,  
I'm new to logstash.I have installed logstash and started it using **sudo service logstash start** ,it works perfectly until today morning. I don't have any idea what happened after that !  
Now i tried the same configuration file (executed earlier,worked fine) but it has no response .So checked the logstash status ,it shows it's status as

```
       **Active: active (running) since Fri 2019-03-29 17:51:58 IST; 30s ago**         

```

But i have started it before 30 minutes it shows 30s ago . What was the problem ? Do i need to change any configuration file ?? I have tried reinstalling logstash too but it won't work in my case !  
Thanks in advance !

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [March 29, 2019, 12:27pm UTC](https://discuss.elastic.co/t/why-my-logstash-keeps-on-restarting/174535/2 "2019-03-29T12:27:48Z")

</div>

What is in the logstash logs? They are probably in /var/log/logstash.

---

<div class="post-metadata">

**Author:** ![Gomathi\_Meena](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gomathi_meena/32/43086_2.png) [@Gomathi\_Meena](https://discuss.elastic.co/u/Gomathi_Meena)\
**Post date:** [March 29, 2019, 12:32pm UTC](https://discuss.elastic.co/t/why-my-logstash-keeps-on-restarting/174535/3 "2019-03-29T12:32:13Z")

</div>

@Badger FYR : logs in var/log/logstash:

[2019-03-29T18:01:21,850][INFO][logstash.runner] Starting Logstash {"logstash.version"=\>"6.6.2"}  
[2019-03-29T18:01:22,823][INFO][logstash.config.source.local.configpathloader] No config files found in path {:path=\>"/etc/logstash/conf.d/\*.conf"}  
[2019-03-29T18:01:22,833][ERROR][logstash.config.sourceloader] No configuration found in the configured sources.  
[2019-03-29T18:01:23,169][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600}

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [March 29, 2019, 1:15pm UTC](https://discuss.elastic.co/t/why-my-logstash-keeps-on-restarting/174535/4 "2019-03-29T13:15:45Z")

</div>

> [@Gomathi\_Meena](#):
>
> /etc/logstash/conf.d/\*.conf

Does that pattern match any files?

---

<div class="post-metadata">

**Author:** ![Gomathi\_Meena](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gomathi_meena/32/43086_2.png) [@Gomathi\_Meena](https://discuss.elastic.co/u/Gomathi_Meena)\
**Post date:** [March 29, 2019, 1:23pm UTC](https://discuss.elastic.co/t/why-my-logstash-keeps-on-restarting/174535/5 "2019-03-29T13:23:33Z")

</div>

@Badger No ..folder conf.d is empty

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [March 29, 2019, 2:49pm UTC](https://discuss.elastic.co/t/why-my-logstash-keeps-on-restarting/174535/6 "2019-03-29T14:49:12Z")

</div>

OK, so you do not have a configuration. Either something deleted the configuration, and you need to recreate it, or you were telling logstash to look somewhere else for the configuration. I cannot add much more since I do not know how you are starting logstash, what command line options you are using, what logstash.yml looks like, etc.

---

<div class="post-metadata">

**Author:** ![Gomathi\_Meena](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gomathi_meena/32/43086_2.png) [@Gomathi\_Meena](https://discuss.elastic.co/u/Gomathi_Meena)\
**Post date:** [March 30, 2019, 5:10am UTC](https://discuss.elastic.co/t/why-my-logstash-keeps-on-restarting/174535/7 "2019-03-30T05:10:32Z")

</div>

To start : sudo service logstash start

To run the config : sudo /usr/share/logstash/bin/logstash -f /home/gomathi/sample.conf

---

<div class="post-metadata">

**Author:** ![staodd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/staodd/32/24509_2.png) [@staodd](https://discuss.elastic.co/u/staodd)\
**Post date:** [March 30, 2019, 8:19am UTC](https://discuss.elastic.co/t/why-my-logstash-keeps-on-restarting/174535/8 "2019-03-30T08:19:25Z")

</div>

So then you have no config for the service. Move your config file into /etc/logstash/conf.d

---

<div class="post-metadata">

**Author:** ![Gomathi\_Meena](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gomathi_meena/32/43086_2.png) [@Gomathi\_Meena](https://discuss.elastic.co/u/Gomathi_Meena)\
**Post date:** [April 24, 2019, 5:22am UTC](https://discuss.elastic.co/t/why-my-logstash-keeps-on-restarting/174535/10 "2019-04-24T05:22:33Z")

</div>

I have tried uninstall the whole ELK and then installed it again after removing all the files. Now its working fine for me !!!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 22, 2019, 5:22am UTC](https://discuss.elastic.co/t/why-my-logstash-keeps-on-restarting/174535/11 "2019-05-22T05:22:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
