# Can you help me with Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError" problem?

**URL:** <https://discuss.elastic.co/t/can-you-help-me-with-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-problem/190949>\
**Category:** Logstash\
**Created:** [July 17, 2019, 9:58am UTC](https://discuss.elastic.co/t/can-you-help-me-with-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-problem/190949 "2019-07-17T09:58:39Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shinw00](https://avatars.discourse-cdn.com/v4/letter/s/6bbea6/32.png) [@Shinw00](https://discuss.elastic.co/u/Shinw00)\
**Post date:** [July 17, 2019, 9:58am UTC](https://discuss.elastic.co/t/can-you-help-me-with-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-problem/190949/1 "2019-07-17T09:58:39Z")

</div>

Hi. First, thank you for your attention.  
Now, I'm trying to give log in my laptop(txt file) to Elasticsearch by logstash.  
I have a problem with filters. I checked whether it runs by deleting filter part.

[2019-07-17T18:02:17,470][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, =\> at line 14, column 16 (byte 187) after filter{\n date{\n match =\> [\"timestamp\", \"MMM dd HH:mm:ss\"]\n }\n\noutput{\n elasticsearch", :backtrace=\>["/Users/mf839-031/Downloads/logstash-7.2.0/logstash-core/lib/logstash/compiler.rb:41:in `compile_imperative'", "/Users/mf839-031/Downloads/logstash-7.2.0/logstash-core/lib/logstash/compiler.rb:49:in `compile\_graph'", "/Users/mf839-031/Downloads/logstash-7.2.0/logstash-core/lib/logstash/compiler.rb:11:in `block in compile_sources'", "org/jruby/RubyArray.java:2577:in `map'", "/Users/mf839-031/Downloads/logstash-7.2.0/logstash-core/lib/logstash/compiler.rb:10:in `compile_sources'", "org/logstash/execution/AbstractPipelineExt.java:151:in `initialize'", "org/logstash/execution/JavaBasePipelineExt.java:47:in `initialize'", "/Users/mf839-031/Downloads/logstash-7.2.0/logstash-core/lib/logstash/java_pipeline.rb:24:in `initialize'", "/Users/mf839-031/Downloads/logstash-7.2.0/logstash-core/lib/logstash/pipeline\_action/create.rb:36:in `execute'", "/Users/mf839-031/Downloads/logstash-7.2.0/logstash-core/lib/logstash/agent.rb:325:in `block in converge\_state'"]} \> input{ \> file{ \> path =\> ["/Users/mf839-031/Downloads/logstash-7.2.0/examples.rtf "] \> } \> } \> \> filter{ \> date{ \> match =\> ["timestamp", "MMM dd HH:mm:ss"] \> } \> \> grok{ \> match =\> {" %{USERNAME:user\_name} %{USERNAME:process}\[%{NUMBER:code}\]: %{GREEDYDATA:message}"} \> } \> \> } \> \> output{ \> elasticsearch{ \> hosts =\> ["localhost:9200"] \> index =\> "hello" \> } \> }'

and the data look like  
ul 17 00:44:57/ MF839-031/ syslogd[39]/: Configuration Notice:  
ASL Module "com.apple.install" claims selected messages.  
Those messages may not appear in standard system log files or in the ASL database.

I'm not familiar with coding so it's really hard for me....  
If you have a chance, please hlep...  
Thanks for reading!!!

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [July 17, 2019, 1:07pm UTC](https://discuss.elastic.co/t/can-you-help-me-with-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-problem/190949/2 "2019-07-17T13:07:59Z")

</div>

> [@Shinw00](#):
>
> filter{  
> date{  
> match =\> ["timestamp", "MMM dd HH:mm:ss"]  
> }
> 
> output{  
> elasticsearch"

You are missing a } to close the filter section.

---

<div class="post-metadata">

**Author:** ![Shinw00](https://avatars.discourse-cdn.com/v4/letter/s/6bbea6/32.png) [@Shinw00](https://discuss.elastic.co/u/Shinw00)\
**Post date:** [July 18, 2019, 7:48am UTC](https://discuss.elastic.co/t/can-you-help-me-with-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-problem/190949/3 "2019-07-18T07:48:32Z")

</div>

Thanks!!! I've solved this problem. Thanks again for your attention!  
Have a nice day!!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 15, 2019, 7:48am UTC](https://discuss.elastic.co/t/can-you-help-me-with-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-problem/190949/4 "2019-08-15T07:48:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
