Error screenshot like below:
Reason:
What I found that was the machine failing had same configuration files . I use sebp/elk which has some config file in the path: /etc/logstash/conf.d. And I create an new config file of logstash-input in the path . When logstash is starting , it will read all files in it's config path(/etc/logstash/conf.d). The result is there are two logstash-input file read .
Fix:
Delete one logstash_input file .