Logstash does not start. Error: "Failed to start the TCP server: the address is used"

Logstash does not start. It says the following:

 :message=>"Could not start TCP server: Address in use", :host=>"0.0.0.0", :port=>1514, :level=>:error}The error reported is: \n  Address already in use - bind - Address already in use"}

Port 1514 is not specified in the logstash configuration file. And when logstash is stopped, the service does not listen on this port. When I start logstash and although I do not specify this port in the configuration file, it starts listening on this port. If I put this port in the logstash configuration file and ran logstash, it gave me an error that the address is being used. I need to use the tcp / 1514 port because all my esxi hypervisors are configured to send logs to this port.

Why, when starting logstash, it starts listening to this port, despite the fact that I do not have this port in the configuration file?

What can I do to successfully start the logstash service using this port in the configuration file?

+4
source share
1 answer

The problem is that the logstash file used two configuration files.

root@srv-syslog:~# locate central.conf
/etc/logstash/conf.d/central.conf
/etc/logstash/conf.d/central.conf.save

I deleted the second one and now everything is in order.

+8
source

Source: https://habr.com/ru/post/1568711/


All Articles