How does one get the version of Logstash?

root@elk:/usr/share/elasticsearch# bin/logstash --help
bash: bin/logstash: No such file or directory

I have Logstash running on my system. Also.

root@elk:/# logstash -V
bash: logstash: command not found


root@elk:/# ps aux | grep logstash
logstash  1725 45.3  8.5 1942860 175936 ?      SNl  22:03   0:35 /usr/bin/java -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -Djava.awt.headless=true -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+HeapDumpOnOutOfMemoryError -Djava.io.tmpdir=/opt/logstash -Xmx500m -Xss2048k -Djffi.boot.library.path=/opt/logstash/vendor/jruby/lib/jni -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -Djava.awt.headless=true -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+HeapDumpOnOutOfMemoryError -Djava.io.tmpdir=/opt/logstash -XX:HeapDumpPath=/opt/logstash/heapdump.hprof -Xbootclasspath/a:/opt/logstash/vendor/jruby/lib/jruby.jar -classpath : -Djruby.home=/opt/logstash/vendor/jruby -Djruby.lib=/opt/logstash/vendor/jruby/lib -Djruby.script=jruby -Djruby.shell=/bin/sh org.jruby.Main --1.9 /opt/logstash/lib/bootstrap/environment.rb logstash/runner.rb agent -f /etc/logstash/conf.d -l /var/log/logstash/logstash.log
root      1777  0.0  0.0   8860   636 ?        S+   22:05   0:00 grep --color=auto logstash


root@elk:/opt/logstash/bin# ls
logstash  logstash.bat  logstash.lib.sh  plugin  plugin.bat  rspec  rspec.bat  setup.bat
root@elk:/opt/logstash/bin# logstash -V
bash: logstash: command not found
  • 2
    First you'll need to find it. – Michael Hampton Feb 24 '16 at 21:54
  • 1
    @MichaelHampton Where does it normally reside? Google hasn't been very informative I'm afraid on this. – Karl Morrison Feb 24 '16 at 21:56
  • Eh? Didn't you install it? Find whoever did. Or just look around the system in the obvious places. – Michael Hampton Feb 24 '16 at 21:57
  • @MichaelHampton I did not install it. Quite common when working on a project someone else has setup. – Karl Morrison Apr 26 '17 at 9:55

Logstash is one of those things that just doesn't quite live where you expect it to live, and the documentation is reallllly light (read: non-existent) on where they expect you to find things, so if you've installed it from a package then it can be nigh impossible to find the expected location documented. 1

Logstash typically lives in /opt/logstash and you can find the logstash binary in the bin folder (/opt/logstash/bin).

From there you can run -V or --version

./logstash -v


./logstash --version

From your comments on another answer, it would appear that this is in a docker container. This is the sort of thing you should really be including in your original question.

You will want to make use of docker exec. You will need to use docker ps to list your containers, and pass that through to your docker exec command.

For example:

docker exec -d elk_container /opt/logstash/bin/logstash --version

1I don't want this to be misconstrued. Logstash documentation is excellent - it's just the parts about where all the different bits are expected to live that's impossible to find

  • 1
    THANK YOU! I see the elitist gang are down voting you also! I'm trying to learn the ropes here but as you said and I completely agree with you, the documentation is incredibly poor (in this area). I updated the question with more output from the console! – Karl Morrison Feb 24 '16 at 22:26
  • @KarlMorrison You need to do ./logstash, or use the full path as I've put in my answer. – Mark Henderson Feb 24 '16 at 22:27
  • 1
    Took around 20 seconds but the command root@elk:/opt/logstash/bin# ./logstash --version did the trick! Thank you! I did upvote but someone apparently downvoted you (?). – Karl Morrison Feb 24 '16 at 22:32
  • 2
    @KarlMorrison Calling people "the elitist gang" is not helping you. The original revision of your question looked the same as many other questions we get from people expecting us to do their research for them. It did not indicate that you had tried to read the documentation. And /opt is one of the obvious places to look for things... – Michael Hampton Feb 24 '16 at 22:35
  • 1
    Well it's my term for individuals who do no good to the stack exchange community (the worst are by far over at mathmatics). Yeah I've been at the documentation for about three days now, before Logstash I was suffering with Sensu. I do always update my questions after more info if needed. Also as I'm not a sysadmin I sometimes don't really know what to include in the question to make it easier, when people ask of course I add more info. However I don't take closing the topic without reason nor posting mocking answers lightly though. Will leave you to it now, thanks again! – Karl Morrison Feb 24 '16 at 22:44

On Logstash 5.x on CentOS/Red Hat:

Location of logstash binary: /usr/share/logstash/bin/

Then this will tell you the version: ./logstash -V


Try find /-type f -name "logstash" 2>/dev/null to find logstash, it will take some time to return though.

Then with the location of logstash run the binary with the --version flag

  • It's in a docker container. This command will not work. – EEAA Feb 24 '16 at 22:02

From the documentation:

-V, --version Display the version of Logstash.

(which took me all of about 30 seconds to find, by the way)

  • 1
    Doh. Updated the question. – Karl Morrison Feb 24 '16 at 21:58
  • 1
    It's from a rather complicated Dockerfile which I do not have time to decode and learn about, I'm busy working... – Karl Morrison Feb 24 '16 at 22:01
  • 3
    Right, and part of your job is to figure out things like this. How are we supposed to know where logstash is installed in your specific environment? – EEAA Feb 24 '16 at 22:01
  • 1
    I'm a software engineer/computer scientist. Anyhows Mark answered perfectly and improved this community. (Stupid questions will continue to come until they are answered somehow, via better documentation or people like Mark, just saying) – Karl Morrison Feb 24 '16 at 22:36
  • 1
    @KarlMorrison I understand that you're a "software engineer/computer scientist". So am I. You are performing systems administration tasks, though, which makes this sort of thing part of your job. We have an expectation for people asking questions that they do their own research. Coming here to ask about logstash, and not having a clue about where it's installed fails the "research" test. – EEAA Feb 24 '16 at 22:38

My logstash on Linux 17.04, logstash was found at: /usr/share/logstash. However, the config files are found at /etc/logstash. I had to copy over the config files to the new location: /usr/share/logstash/config to get logstash to work.


Firstly, you'll need to find the path to logstash. Try searching for it by running updatedb && locate logstash/bin. I found mine in /usr/share/logstash/bin.

Running logstash with the "-v" or "--version" flags should return the version.

  • 1
    This answer assumes that you have locate installed. If not, the answers above should work :) – Mweya Ruider May 20 '18 at 20:06

To check logstash version from server run below command: cd /usr/share/logstash; ./bin/logstash -V


Logstash keeps its version identity in a ruby file i.e version.rb In Ubuntu, you can find version file at following location. So,use this cat /opt/logstash/lib/logstash/version.rb

  • Adding some detail about this would improve the answer – Dave M Jul 1 '16 at 17:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.