I will show you how to fix issue Logstash fail to run on port 5000 on MacOS Monterey on this post.
When you try to run Logstash, you might see an error some sort like this.
$ docker-compose up Creating network "docker-elk_elk" with driver "bridge" Creating volume "docker-elk_setup" with default driver Creating volume "docker-elk_elasticsearch" with default driver Creating docker-elk_elasticsearch_1 ... done Creating docker-elk_setup_1 ... done Creating docker-elk_logstash_1 ... error Creating docker-elk_kibana_1 ... Creating docker-elk_kibana_1 ... done ERROR: for logstash Cannot start service logstash: Ports are not available: listen tcp 0.0.0.0:5000: bind: address already in use ERROR: Encountered errors while bringing up the project.
FYI: I was running ELK stack via docker compose, you can find it here: https://github.com/deviantony/docker-elk
The port is occupied by some service, let’s find out what service is using it.
$ lsof -i :5000 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME ControlCe 504 petehouston 19u IPv4 0x519816ddcc921f17 0t0 TCP *:commplex-main (LISTEN) ControlCe 504 petehouston 20u IPv6 0x519816cf65b7de9f 0t0 TCP *:commplex-main (LISTEN)
It says “ControlCe“, which is the Control Center service of MacOS.
The fix is very simple by opening the Sharing service and turning off the AirPlay Receiver, like below:
That’s it, now you can start running Logstash again without any problem.