Can't start logstash on Windows
Description
Attachments
discovered while testing
Gliffy Diagrams
Activity
Philippe Weber August 1, 2014 at 6:03 AM
Just cleaning the status
Mark Frost May 6, 2013 at 9:32 PMEdited
Still not having any luck here. I've yet to see a single successful logstash behavior on Windows 2003, 2003R2, 2008, or 2008R2. If you can help direct me at what I might be doing wrong, I'd greatly appreciate it.
I gave up on using Event Log and tried to get Logstash to work on Windows with just a simple text file log.
Here's my config:
And when I try to run Logstash with this config, I get one piece of debugging output, and then it just quits. Note that I added the stdout output to try to get something useful. I also checked under C:/logstash/sincedb, and it's an empty directory.
I get the following output:
This is with the latest nightly build.
Jordan Sissel May 5, 2013 at 12:37 AM
When I use the eventlog input, it works for me
Mark Frost May 2, 2013 at 9:22 PM
Some googling around, I found a note that said this:
"you used up all the WMI handles in the entire system (a different rogue process did)! reboot or maybe wait awhile"
I dont know that I necessarily understand (WMI is a mystery to me). But... I'm wondering if this has something to do with the Event Log having a ton of data in it the first time I'm trying to run logstash, and in some way it's trying to bite off more than it can chew. does that make any sense?
Jordan Sissel May 2, 2013 at 8:26 PM
I've seen this before, but I have no idea why it happens and I can't reproduce it in a way that makes me understand why it occurs
I've tested this with 1.1.10 and 1.1.11-dev's nightly build as of 4-30-2013. I can't seem to get Logstash to start on Windows at all.
Here's the output I'm getting:
Exception in thread "main" org.jruby.exceptions.RaiseException: (LoadError) no such file to load – i18n
at org.jruby.RubyKernel.require(org/jruby/RubyKernel.java:1027)
at RUBY.require(jar:file:/C:/PHPDev/logstash/logstash-1.1.11.dev-monolithic.jar!/META-INF/jruby.home/lib/ruby/shared/rubygems/custom_require.rb:36)
at RUBY.require(file:/C:/PHPDev/logstash/logstash-1.1.11.dev-monolithic.jar!/logstash/JRUBY-6970.rb:13)
at logstash.runner.(root)(logstash/runner.rb:44)
This was referenced in Logstash-1016, but then never went anywhere else.
My understanding is that I can't use versions older than 1.1.10 because it contained bugfixes for the Windows Eventlog.
We're trying to test logstash to see if it's a solution we can roll out in our enterprise, but since right now I can find no working version of it for Windows... this is a real roadblock to forward momentum.