Logstash says address already in use but no evidence that is the case?

gistfile1.txt

[root@splunk ~]# lsof -i -P | grep 5043
[root@splunk ~]#

[root@splunk ~]# cat /opt/logstash/server/etc/conf.d/logstash.conf
input {

      lumberjack {
        port => 5043
	ssl_certificate => "/etc/ssl/logstash.pub"
        ssl_key => "/etc/ssl/logstash.key"
        type => syslog
      }
}

output {
  elasticsearch { embedded => true }
}

[root@splunk ~]# /etc/init.d/logstash_server start
Starting logstash...
Logstash started successfully                              [  OK  ]

[root@splunk ~]# cat /var/log/logstash/server.log
The error reported is:
  Address already in use - bind - Address already in use