Skip to content

Windows installation of microsoft-sentinel-log-analytics-logstash-output-plugin 2.5.1 fails with Errno::ESRCH during gem extraction #15355

Open

Description

@0ldHand

Describe the bug
I encountered a reproducible installation failure when installing the Microsoft Sentinel Logstash output plugin on Windows.

The plugin installation fails during gem extraction with:
Errno::ESRCH: No such process - No message available
chmod at org/jruby/RubyFile.java:655
chmod at C:/ls/vendor/jruby/lib/ruby/stdlib/fileutils.rb:1326
chmod at C:/ls/vendor/jruby/lib/ruby/stdlib/fileutils.rb:1002

To Reproduce
Steps to reproduce the behavior:

  1. logstash-plugin install microsoft-sentinel-log-analytics-logstash-output-plugin
    or
  2. logstash-plugin install microsoft-sentinel-log-analytics-logstash-output-plugin-2.5.1-java.gem
  3. See error

Expected behavior
Plugin to succeed without error.

Environment (please complete the following information):

  • OS: Windows Server x64
  • Logstash 9.3.3
  • Bundled JDK (Java 21)
  • Plugin version: 2.5.1

Additional context
Workaround

The installation succeeds after modifying RubyGems' package.rb to ignore Errno::ESRCH exceptions generated by Windows/JRuby during chmod operations.

if entry.file?
File.open(destination, "wb") {|out| copy_stream(entry, out) }

begin
FileUtils.chmod(
file_mode(entry.header.mode) & ~File.umask,
destination
)
rescue Errno::ESRCH
# Windows/JRuby chmod workaround
end

and also later in the file:

if dir_mode
begin
File.chmod(dir_mode, *directories)
rescue Errno::ESRCH
# Windows/JRuby chmod workaround
end
end

Activity

  1. lamiahjoint commented on Oct 21, 2026

    @lamiahjoint

    Hi 0ldHand, we've fixed this, can you try installing the latest output plugin version (2.5.2) using: logstash-plugin install microsoft-sentinel-log-analytics-logstash-output-plugin
    Can you please update the plugin to 2.5.2 and let us know if it worked?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions