Nagios Support Forum

Hi Team,
Both Logstash and Elastic Search have stopped. Kindly provide the commands to start them.

Attached screenshot

However both of them showing in running state when executing the following commands inside putty
service logstash status
service elasticsearch status

Please PM me a copy of your profile, you can download it from Admin > System Status by clicking the Download System Profile button.

I am able to download but not able to extract. So I used the following command
[user@<MachineName> /]# sudo /usr/local/nagioslogserver/scripts/profile.sh
system-profile/
system-profile/timestamp.txt
system-profile/lsversion.txt
system-profile/masters.txt
system-profile/nodes.txt
system-profile/shard-health.txt
system-profile/shard-status.txt
system-profile/indices-status.txt
system-profile/jvm-status.txt
system-profile/cluster.txt
system-profile/pending-tasks.txt
system-profile/recovery.txt
system-profile/plugins.txt
system-profile/logstash-plugins.txt
system-profile/memory.txt
system-profile/psaux.txt
system-profile/netstat.txt
system-profile/disk.txt
system-profile/network.txt
system-profile/iptables.txt
system-profile/firewalld.txt
system-profile/logstash-confd/
system-profile/logstash-confd/000_inputs.conf
system-profile/logstash-confd/500_filters.conf
system-profile/logstash-confd/501_live_filters.conf
system-profile/logstash-confd/998_live_outputs.conf
system-profile/logstash-confd/999_outputs.conf
system-profile/store.txt
system-profile/apachelogs/
system-profile/apachelogs/access_log
system-profile/apachelogs/error_log
system-profile/systemlog.txt
system-profile/elasticsearchlog/
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df.log
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df_index_indexing_slowlog.log
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df_index_search_slowlog.log
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df.log.4.gz
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df.log.6.gz
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df.log.3.gz
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df.log.2.gz
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df.log.1.gz
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df.log.7.gz
system-profile/elasticsearchlog/a047da08-1be8-48ee-b1ac-19741fa828df.log.5.gz
system-profile/logstashlogs/
system-profile/logstashlogs/logstash.log
system-profile/logstashlogs/logstash.log.1.gz
system-profile/logstashlogs/logstash.log.2.gz

Hello @SuryanuSanyal

When you state that you are unable extract it? You do see the 'System Profile" in the /tmp/ directory and it is in a tar.gz compressed format. If you would like to extract the System Profile before you send it over you can use the following command:
If you find that it is too big to send please use the split --bytes=50M /tmp/system-profile.tar.gz systemprofileparts

Please then send each systemprofilepartsx in separate PM messages.

Thanks,
Perry

I have PM you the system profile. Please check and let me know the solution to resolve this

Hello @SuryanSanyal

Thanks for sending over the 'Profile', I get a "tar: Error is not recoverable: exiting now" error message and want to have you go ahead and re-run the script from the following command:
Please PM the results found in '/tmp/system-profile.tar.gz'

Thanks,
Perry