Page 2 of 2
Re: Logstash Daemon dead but pid file exists
Posted: Wed May 17, 2017 11:49 am
by tgriep
Can you run the following command and post the output so we can see the logstash errors?
Code: Select all
tail -100 /var/log/logstash/logstash.log
Re: Logstash Daemon dead but pid file exists
Posted: Thu May 18, 2017 1:15 am
by Nags007
[root@NagiosLogserver ]# cd /var/log/logstash
[root@NagiosLogserver logstash]# ll
total 0
[root@NagiosLogserver logstash]# pwd
/var/log/logstash
[root@NagiosLogserver logstash]# ll
total 0
[root@NagiosLogserver logstash]# ls -ltr
total 0
[root@NagiosLogserver logstash]#
======================================
As informed earlier, this log file is not getting generated. there is no LOG file in the /var/log/logstash directory.
Thank you,
nagesh
Re: Logstash Daemon dead but pid file exists
Posted: Thu May 18, 2017 9:40 am
by tgriep
Lets run the logstash command manually and see if the error is displayed in the console.
Login to the logserver as root, run the following command and post the output.
Code: Select all
nice -n 19 runuser -s /bin/sh -c "exec /usr/local/nagioslogserver/logstash/bin/logstash agent -f /usr/local/nagioslogserver/logstash/etc/conf.d --verbose" nagios
Then, run the following commands as root and post the /tmp/ls.txt file.
Code: Select all
ls -lR /usr/local/nagioslogserver >/tmp/ls.txt
ls -l /var/log/ >>/tmp/ls.txt
ls -l /var/run/ >>/tmp/ls.txt
Thanks