filebeat-init

#!/bin/sh
# Init script for logstash
# Maintained by Elasticsearch
# Generated by pleaserun.
# Implemented based on LSB Core 3.1:
#   * Sections: 20.2, 20.3
# spujadas 2015-05-21; emptied LS_HOME (updated by Dockerfile)
#
### BEGIN INIT INFO
# Provides:          filebeat
# Required-Start:    $remote_fs $syslog
# Required-Stop:     $remote_fs $syslog
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description:
# Description:        Starts Filebeat as a daemon.
### END INIT INFO

PATH=/sbin:/usr/sbin:/bin:/usr/bin
export PATH

if [ $(id -u) -ne 0 ]; then
   echo "You need root privileges to run this script"
   exit 1
fi

name=filebeat
pidfile="/var/run/$name.pid"

FB_USER=beat
FB_GROUP=beat
FB_HOME=
FB_LOG_DIR=/var/log/filebeat
FB_LOG_FILE="${FB_LOG_DIR}/${name}-plain.log"
FB_CONF=/etc/filebeat/conf.d/filebeat.yml
FB_OPEN_FILES=16384
FB_NICE=19
FB_OPTS=

[ -r /etc/default/$name ] && . /etc/default/$name
[ -r /etc/sysconfig/$name ] && . /etc/sysconfig/$name

program=./filebeat
args="-e -c ${FB_CONF}"

start() {
  HOME=${FB_HOME}

  export PATH HOME

  touch ${FB_LOG_FILE}
  chown ${FB_USER}:${FB_GROUP} ${FB_LOG_FILE}

  # set ulimit as (root, presumably) first, before we drop privileges
  ulimit -n ${FB_OPEN_FILES}

  # Run the program!
  nice -n ${FB_NICE} chroot --userspec $FB_USER:$FB_GROUP / sh -c "cd $FB_HOME && ulimit -n ${FB_OPEN_FILES} && exec \"$program\" $args" &> "${FB_LOG_FILE}" &

  # Generate the pidfile from here. If we instead made the forked process
  # generate it there will be a race condition between the pidfile writing
  # and a process possibly asking for status.
  echo $! > $pidfile

  echo "$pidfile pidfile"
  echo "$name started."
  return 0
}

stop() {
  # Try a few times to kill TERM the program
  if status; then
    pid=$(cat "$pidfile")
    echo "Killing $name (pid $pid) with SIGTERM"
    kill -TERM $pid
    # Wait for it to exit.
    for i in 1 2 3 4 5; do
      echo "Waiting for $name (pid $pid) to die..."
      status || break
      sleep 1
    done
    if status; then
      echo "$name stop failed; still running."
    else
      echo "$name stopped."
      rm -f $pidfile
    fi
  fi
}

status() {
  if [ -f "$pidfile" ] ; then
    pid=$(cat "$pidfile")
    if kill -0 $pid > /dev/null 2> /dev/null; then
      # process by this pid is running.
      # It may not be our pid, but that's what you get with just pidfiles.
      # TODO(sissel): Check if this process seems to be the same as the one we
      # expect. It'd be nice to use flock here, but flock uses fork, not exec,
      # so it makes it quite awkward to use in this case.
      return 0
    else
      return 2 # program is dead but pid file exists
    fi
  else
    return 3 # program is not running
  fi
}

force_stop() {
  if status; then
    stop
    status && kill -KILL $(cat "$pidfile")
    rm -f $pidfile
  fi
}


case "$1" in
  start)
    status
    code=$?
    if [ $code -eq 0 ]; then
      echo "$name is already running"
    else
      start
      code=$?
    fi
    exit $code
    ;;

  stop) stop ;;

  force-stop) force_stop ;;

  status)
    status
    code=$?
    if [ $code -eq 0 ]; then
      echo "$name is running"
    else
      echo "$name is not running"
    fi
    exit $code
    ;;

  restart) stop && start ;;

  *)
    echo "Usage: $SCRIPTNAME {start|stop|force-stop|status|restart}" >&2
    exit 3
    ;;
esac

exit $?