logstash no longer binds to privileged port after upgrade 2026R1.0.3
Posted: Wed Jan 14, 2026 7:21 am
Hi,
after upgrading from 2026R1.0.2 to 2026R1.0.3 logstash no longer binds to privileged ports. In my case I have an input filter to listen on port 514 for some legacy devices, but since the upgrade there is nothing listening on port 514. I have the following error message in de /var/log/message:
software runs on RHEL9.7
Any idea how to fix this?
Kind regards,
Hans
after upgrading from 2026R1.0.2 to 2026R1.0.3 logstash no longer binds to privileged ports. In my case I have an input filter to listen on port 514 for some legacy devices, but since the upgrade there is nothing listening on port 514. I have the following error message in de /var/log/message:
Code: Select all
Jan 14 11:21:51 my_server logstash[472527]: [2026-01-14T11:21:51,351][WARN ][logstash.inputs.syslog ][main][6959ef36df66d3c06efe0c86a4757b9b94c41452b36a9b4fbc1229d00649b7b9] syslog listener die
d {:protocol=>:udp, :address=>"0.0.0.0:514", :exception=>#<Errno::EACCES: Permission denied - bind(2) for "0.0.0.0" port 514>, :backtrace=>["org/jruby/ext/socket/RubyUDPSocket.java:167:in `bind
'", "/usr/local/nagioslogserver/logstash/vendor/local_gems/44acb515/logstash-input-syslog-3.7.1/lib/logstash/inputs/syslog.rb:193:in `udp_listener'", "/usr/local/nagioslogserver/logstash/vendor
/local_gems/44acb515/logstash-input-syslog-3.7.1/lib/logstash/inputs/syslog.rb:174:in `server'", "/usr/local/nagioslogserver/logstash/vendor/local_gems/44acb515/logstash-input-syslog-3.7.1/lib/
logstash/inputs/syslog.rb:154:in `block in run'"]}
Jan 14 11:21:51 my_server logstash[472527]: [2026-01-14T11:21:51,358][WARN ][logstash.inputs.syslog ][main][6959ef36df66d3c06efe0c86a4757b9b94c41452b36a9b4fbc1229d00649b7b9] syslog listener die
d {:protocol=>:tcp, :address=>"0.0.0.0:514", :exception=>#<Errno::EACCES: Permission denied - bind(2) for "0.0.0.0" port 514>, :backtrace=>["org/jruby/ext/socket/RubyTCPServer.java:123:in `init
ialize'", "org/jruby/RubyClass.java:950:in `new'", "org/jruby/RubyIO.java:889:in `new'", "/usr/local/nagioslogserver/logstash/vendor/local_gems/44acb515/logstash-input-syslog-3.7.1/lib/logstash
/inputs/syslog.rb:210:in `tcp_listener'", "/usr/local/nagioslogserver/logstash/vendor/local_gems/44acb515/logstash-input-syslog-3.7.1/lib/logstash/inputs/syslog.rb:174:in `server'", "/usr/local
/nagioslogserver/logstash/vendor/local_gems/44acb515/logstash-input-syslog-3.7.1/lib/logstash/inputs/syslog.rb:158:in `block in run'"]}Any idea how to fix this?
Kind regards,
Hans
.