logstash启动报错

Question

测试命令 ruby脚本
bin/logstash -e 'input { stdin { } } output { stdout {} }'
控制台输出

{:error=>#<NameError: uninitialized constant LibC::FFI>, :backtrace=>["org/jruby/RubyModule.java:3742:in `const_missing'", "/usr/local/nginx_log_collect/logstash-oss-6.8.22/logstash-core/lib/logstash/util/prctl.rb:4:in `<module:LibC>'", "/usr/local/nginx_log_collect/logstash-oss-6.8.22/logstash-core/lib/logstash/util/prctl.rb:2:in `<main>'", "org/jruby/RubyKernel.java:987:in `require'", "/usr/local/nginx_log_collect/logstash-oss-6.8.22/vendor/bundle/jruby/2.5.0/gems/polyglot-0.3.5/lib/polyglot.rb:65:in `require'", "/usr/local/nginx_log_collect/logstash-oss-6.8.22/logstash-core/lib/logstash/util.rb:21:in `set_thread_name'", "/usr/local/nginx_log_collect/logstash-oss-6.8.22/logstash-core/lib/logstash/runner.rb:306:in `execute'", "/usr/local/nginx_log_collect/logstash-oss-6.8.22/vendor/bundle/jruby/2.5.0/gems/clamp-0.6.5/lib/clamp/command.rb:67:in `run'", "/usr/local/nginx_log_collect/logstash-oss-6.8.22/logstash-core/lib/logstash/runner.rb:237:in `run'", "/usr/local/nginx_log_collect/logstash-oss-6.8.22/vendor/bundle/jruby/2.5.0/gems/clamp-0.6.5/lib/clamp/command.rb:132:in `run'", "/usr/local/nginx_log_collect/logstash-oss/lib/bootstrap/environment.rb:73:in `<main>'"]}

格式化

[
    "org/jruby/RubyModule.java:3742:in `const_missing'",
    "/usr/local/nginx_log_collect/logstash-oss-6.8.22/logstash-core/lib/logstash/util/prctl.rb:4:in `<module:LibC>'",
    "/usr/local/nginx_log_collect/logstash-oss-6.8.22/logstash-core/lib/logstash/util/prctl.rb:2:in `<main>'",
    "org/jruby/RubyKernel.java:987:in `require'",
    "/usr/local/nginx_log_collect/logstash-oss-6.8.22/vendor/bundle/jruby/2.5.0/gems/polyglot-0.3.5/lib/polyglot.rb:65:in `require'",
    "/usr/local/nginx_log_collect/logstash-oss-6.8.22/logstash-core/lib/logstash/util.rb:21:in `set_thread_name'",
    "/usr/local/nginx_log_collect/logstash-oss-6.8.22/logstash-core/lib/logstash/runner.rb:306:in `execute'",
    "/usr/local/nginx_log_collect/logstash-oss-6.8.22/vendor/bundle/jruby/2.5.0/gems/clamp-0.6.5/lib/clamp/command.rb:67:in `run'",
    "/usr/local/nginx_log_collect/logstash-oss-6.8.22/logstash-core/lib/logstash/runner.rb:237:in `run'",
    "/usr/local/nginx_log_collect/logstash-oss-6.8.22/vendor/bundle/jruby/2.5.0/gems/clamp-0.6.5/lib/clamp/command.rb:132:in `run'",
    "/usr/local/nginx_log_collect/logstash-oss/lib/bootstrap/environment.rb:73:in `<main>'"
]

Answer 1

这个错误是因为 Logstash 找不到 FFI 模块，可能是由于环境配置问题导致的。建议尝试以下方法解决：

1.确认 FFI 模块已经安装，执行以下命令：

gem list ffi

如果 ffi 模块已经安装，则会显示版本号，如果未安装，则需要使用 gem 命令进行安装：

gem install ffi

2.确认环境变量设置正确
Logstash 需要设置 LD_LIBRARY_PATH 环境变量来查找 FFI 库文件，可以执行以下命令查看该环境变量是否已经设置：

echo $LD_LIBRARY_PATH

如果输出为空，则需要设置该环境变量，例如：

export LD_LIBRARY_PATH=/usr/local/lib:$LD_LIBRARY_PATH

注意，需要将 /usr/local/lib 改成实际的 FFI 库文件所在目录。

3.确认 Logstash 版本和 FFI 版本兼容
Logstash 和 FFI 有版本兼容性的要求，如果 Logstash 和 FFI 版本不兼容，则会出现这个错误。建议使用兼容的版本，可以参考 Logstash 和 FFI 的版本兼容列表进行选择。