Logstash Daemon dead but pid file exists

This support forum board is for support questions relating to Nagios Log Server, our solution for managing and monitoring critical log data.
User avatar
tgriep
Madmin
Posts: 9190
Joined: Thu Oct 30, 2014 9:02 am

Re: Logstash Daemon dead but pid file exists

Post by tgriep »

Can you run the following command and post the output so we can see the logstash errors?

Code: Select all

tail -100 /var/log/logstash/logstash.log
Be sure to check out our Knowledgebase for helpful articles and solutions!
Nags007
Posts: 58
Joined: Wed Mar 08, 2017 12:32 pm

Re: Logstash Daemon dead but pid file exists

Post by Nags007 »

[root@NagiosLogserver ]# cd /var/log/logstash
[root@NagiosLogserver logstash]# ll
total 0
[root@NagiosLogserver logstash]# pwd
/var/log/logstash
[root@NagiosLogserver logstash]# ll
total 0
[root@NagiosLogserver logstash]# ls -ltr
total 0
[root@NagiosLogserver logstash]#
======================================

As informed earlier, this log file is not getting generated. there is no LOG file in the /var/log/logstash directory.

Thank you,
nagesh
User avatar
tgriep
Madmin
Posts: 9190
Joined: Thu Oct 30, 2014 9:02 am

Re: Logstash Daemon dead but pid file exists

Post by tgriep »

Lets run the logstash command manually and see if the error is displayed in the console.
Login to the logserver as root, run the following command and post the output.

Code: Select all

nice -n 19 runuser -s /bin/sh -c "exec /usr/local/nagioslogserver/logstash/bin/logstash agent -f /usr/local/nagioslogserver/logstash/etc/conf.d --verbose" nagios
Then, run the following commands as root and post the /tmp/ls.txt file.

Code: Select all

ls -lR /usr/local/nagioslogserver >/tmp/ls.txt
ls -l /var/log/ >>/tmp/ls.txt
ls -l /var/run/ >>/tmp/ls.txt
Thanks
Be sure to check out our Knowledgebase for helpful articles and solutions!
Locked