Logstash Collector failing

This support forum board is for support questions relating to Nagios Log Server, our solution for managing and monitoring critical log data.
Locked
Linuxlogger
Posts: 32
Joined: Thu Jun 23, 2016 4:33 pm

Logstash Collector failing

Post by Linuxlogger »

Hi All,

I have a single instance NLS server that has been running well until recently. Currently the Logstash collector will only run for a few seconds at a time. I have tried the usual troubleshooting items, restarted the service, restarted the database service and the logstash collector, Rolled back configuration to one that was good 2 weeks ago, updated the server to version 1.42. Rebooted the server (yes I did come from a windows environment ;) ). What other troubleshooting steps should I attempt and what logs should I be looking at to resolve this issue?
Linuxlogger
Posts: 32
Joined: Thu Jun 23, 2016 4:33 pm

Re: Logstash Collector failing

Post by Linuxlogger »

Looking at the /var/log/logstash/logstash.log I see the following message when I attempt to restart the logstash server
{:timestamp=>"2016-09-13T11:52:46.061000-0700", :message=>"Could not start TCP server: Address in use", :host=>"0.0.0.0", :port=>5544, :level=>:error}
{:timestamp=>"2016-09-13T11:52:46.066000-0700", :message=>"The error reported is: \n Address already in use - bind - Address already in use"}

Any idea what may have changed to give this error.
rkennedy
Posts: 6579
Joined: Mon Oct 05, 2015 11:45 am

Re: Logstash Collector failing

Post by rkennedy »

What is the full output of ps -ef and netstat -nap from the NLS machine?
Former Nagios Employee
Linuxlogger
Posts: 32
Joined: Thu Jun 23, 2016 4:33 pm

Re: Logstash Collector failing

Post by Linuxlogger »

The issue is resolved. I ended up rerunning fullinstall and everything is working now.
User avatar
mcapra
Posts: 3739
Joined: Thu May 05, 2016 3:54 pm

Re: Logstash Collector failing

Post by mcapra »

Awesome! Is it alright if we lock this thread?
Former Nagios employee
https://www.mcapra.com/
Locked