Nagios Support Forum

Hi All,

I have a single instance NLS server that has been running well until recently. Currently the Logstash collector will only run for a few seconds at a time. I have tried the usual troubleshooting items, restarted the service, restarted the database service and the logstash collector, Rolled back configuration to one that was good 2 weeks ago, updated the server to version 1.42. Rebooted the server (yes I did come from a windows environment ). What other troubleshooting steps should I attempt and what logs should I be looking at to resolve this issue?

Looking at the /var/log/logstash/logstash.log I see the following message when I attempt to restart the logstash server
{:timestamp=>"2016-09-13T11:52:46.061000-0700", :message=>"Could not start TCP server: Address in use", :host=>"0.0.0.0", :port=>5544, :level=>:error}
{:timestamp=>"2016-09-13T11:52:46.066000-0700", :message=>"The error reported is: \n Address already in use - bind - Address already in use"}

Any idea what may have changed to give this error.

What is the full output of ps -ef and netstat -nap from the NLS machine?

The issue is resolved. I ended up rerunning fullinstall and everything is working now.

Awesome! Is it alright if we lock this thread?