app-admin/logstash-bin ships a logrotate configuration file. In version 2.2, the first line, saying which files to rotate, looked like this: /var/log/logstash/*.log { In version 2.3.0, it was changed to this: /var/log/logstash/*.{err,log} { Which makes logrotate say: error: logstash:1 unknown option 'err' -- ignoring line Because logrotate doesn't accept {} expansions in file names - a '{' character instead separates the file name from the configuration directives. A correct line that would actually accomplish what it looks like the purpose was might be: /var/log/logstash/*.err /var/log/logstash/*.log { But I don't see why the change was made at all, since according to the init script logstash only logs to one file: LS_LOG_FILE=${LS_LOG_FILE:-/var/log/logstash/logstash.log}
It looks like this bug affects app-admin/logstash-bin-2.2.2-r1 as well, but I haven't tested that version.
Thanks for reporting the issues with the latest logstash bump. Patrick, as the author of this bump, promised he will take immediate actions to fix these problems. Sorry for the trouble.
Fixed.