# Cannot convert String into Integer

**URL:** https://discuss.elastic.co/t/cannot-convert-string-into-integer/56588
**Category:** Logstash
**Created:** [July 28, 2016, 8:36am UTC](https://discuss.elastic.co/t/cannot-convert-string-into-integer/56588 "2016-07-28T08:36:27Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![hassanfarid](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hassanfarid/32/10626_2.png) [@hassanfarid](https://discuss.elastic.co/u/hassanfarid)
#### Post date: [July 28, 2016, 8:36am UTC](https://discuss.elastic.co/t/cannot-convert-string-into-integer/56588/1 "2016-07-28T08:36:27Z")

</div>

I am using logstash 2.3.4 - the configuration worked for previous inputs in file, some input is now crashing it. How to find the error log line?

Exception in pipelineworker, the pipeline stopped processing new events, please check your filter configuration and restart Logstash. {"exception"=\>#\<TypeError: can't convert String into Integer\>, "backtrace"=\>["org/jruby/RubyFixnum.java:1143:in `[]'", "/home/sme/monitor/logstash-2.3.4/vendor/bundle/jruby/1.9/gems/logstash-core-event-2.3.4-java/lib/logstash/util/accessors.rb:56:in`get'", "/home/sme/monitor/logstash-2.3.4/vendor/bundle/jruby/1.9/gems/logstash-core-event-2.3.4-java/lib/logstash/event.rb:122:in `[]'", "/home/sme/monitor/logstash-2.3.4/vendor/bundle/jruby/1.9/gems/logstash-core-event-2.3.4-java/lib/logstash/string_interpolation.rb:118:in`evaluate'", "/home/sme/monitor/logstash-2.3.4/vendor/bundle/jruby/1.9/gems/logstash-core-event-2.3.4-java/lib/logstash/string\_interpolation.rb:27:in `evaluate'", "/home/sme/monitor/logstash-2.3.4/vendor/bundle/jruby/1.9/gems/logstash-core-event-2.3.4-java/lib/logstash/event.rb:199:in`sprintf'", "/home/sme/monitor/logstash-2.3.4/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.4-java/lib/logstash/util/decorators.rb:20:in `add_fields'", "org/jruby/RubyArray.java:1613:in`each'", "/home/sme/monitor/logstash-2.3.4/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.4-java/lib/logstash/util/decorators.rb:19:in `add_fields'", "org/jruby/RubyHash.java:1342:in`each'", "/home/sme/monitor/logstash-2.3.4/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.4-java/lib/logstash/util/decorators.rb:16:in `add_fields'", "/home/sme/monitor/logstash-2.3.4/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.4-java/lib/logstash/filters/base.rb:171:in`filter\_matched'", "/home/sme/monitor/logstash-2.3.4/vendor/bundle/jruby/1.9/gems/logstash-filter-mutate-2.0.6/lib/logstash/filters/mutate.rb:230:in `filter'", "/home/sme/monitor/logstash-2.3.4/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.4-java/lib/logstash/filters/base.rb:151:in`multi\_filter'", "org/jruby/RubyArray.java:1613:in `each'", "/home/sme/monitor/logstash-2.3.4/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.4-java/lib/logstash/filters/base.rb:148:in`multi\_filter'", "(eval):238:in `filter_func'", "/home/sme/monitor/logstash-2.3.4/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.4-java/lib/logstash/pipeline.rb:267:in`filter\_batch'", "org/jruby/RubyArray.java:1613:in `each'", "org/jruby/RubyEnumerable.java:852:in`inject'", "/home/sme/monitor/logstash-2.3.4/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.4-java/lib/logstash/pipeline.rb:265:in `filter_batch'", "/home/sme/monitor/logstash-2.3.4/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.4-java/lib/logstash/pipeline.rb:223:in`worker\_loop'", "/home/sme/monitor/logstash-2.3.4/vendor/bundle/jruby/1.9/gems/logstash-core-2.3.4-java/lib/logstash/pipeline.rb:201:in `start\_workers'"], :level=\>:error}

---

<div class="post-metadata">

### Author: ![niraj\_kumar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/niraj_kumar/32/4130_2.png) [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)
#### Post date: [July 28, 2016, 8:01pm UTC](https://discuss.elastic.co/t/cannot-convert-string-into-integer/56588/2 "2016-07-28T20:01:17Z")

</div>

Can you show your config.

---

<div class="post-metadata">

### Author: ![hassanfarid](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hassanfarid/32/10626_2.png) [@hassanfarid](https://discuss.elastic.co/u/hassanfarid)
#### Post date: [August 11, 2016, 7:45am UTC](https://discuss.elastic.co/t/cannot-convert-string-into-integer/56588/3 "2016-08-11T07:45:29Z")

</div>

```
Please see below filter clause in config file,

filter {
    grok {
        match => ["message", "%{TIMESTAMP_ISO8601:logTimestampString} \[%{WORD:logMode}\]: Server %{WORD:messageType}:%{GREEDYDATA:jsonObject}"]
    }
    json {
        source => "jsonObject"
        target => "doc"
    }
    if ([messageType] == "Request") {
        date {
            locale => "en"
            match => ["logTimestampString", "YYYY-MM-dd HH:mm:ss"]
            target => "requestLogTimestamp"
        }
        mutate {
            add_field => {
                "requestType" => "%{[doc][requestType]}"
            }
        }
    }
    else if ([messageType] == "Response"){
        date {
            locale => "en"
            match => ["logTimestampString", "YYYY-MM-dd HH:mm:ss"]
            target => "responseLogTimestamp"
        }
        if ([doc][message] != "success") {
            mutate {
                add_field => {
                    "ErrorMessage" => "%{[doc][reply][ErrorMessage]}"
                }
            }
        }
        mutate {
            add_field => {
                "messageStatus" => "%{[doc][message]}"
            }
        }
    }
    mutate {
        add_field => {
                "requestID" => "%{[doc][requestID]}"
        }
        remove_field => ["jsonObject", "doc", "path", "logTimestampString", "reply", "request", "message"]
    }
}
```

---

<div class="post-metadata">

### Author: ![Ramu\_Pedada](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ramu_pedada/32/17157_2.png) [@Ramu\_Pedada](https://discuss.elastic.co/u/Ramu_Pedada)
#### Post date: [April 7, 2017, 3:17pm UTC](https://discuss.elastic.co/t/cannot-convert-string-into-integer/56588/4 "2017-04-07T15:17:48Z")

</div>

Same issue here also for me. I'm using 2.4.1 version of logstash. Issue is with event\_id condition in filter section(I'm taking even\_id as integer). It seems there is an issue with mutate. It is working fine in output section on same event\_id field

**Error message:**  
Exception in pipelineworker, the pipeline stopped processing new events, please check your filter configuration and restart Logstash. {"exception"=\>#\<TypeError: can't convert String into Integer\>, "backtrace"=\>["org/jruby/RubyFixnum.java:1143:in `[]'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-event-2.4.1-java/lib/logstash/util/accessors.rb:56:in`get'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-event-2.4.1-java/lib/logstash/event.rb:122:in `get'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-event-2.4.1-java/lib/logstash/string_interpolation.rb:118:in`evaluate'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-event-2.4.1-java/lib/logstash/string\_interpolation.rb:90:in `evaluate'", "org/jruby/RubyArray.java:2409:in`collect'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-event-2.4.1-java/lib/logstash/string\_interpolation.rb:90:in `evaluate'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-event-2.4.1-java/lib/logstash/string_interpolation.rb:27:in`evaluate'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-event-2.4.1-java/lib/logstash/event.rb:202:in `sprintf'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.1-java/lib/logstash/util/decorators.rb:20:in`add\_fields'", "org/jruby/RubyArray.java:1613:in `each'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.1-java/lib/logstash/util/decorators.rb:19:in`add\_fields'", "org/jruby/RubyHash.java:1342:in `each'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.1-java/lib/logstash/util/decorators.rb:16:in`add\_fields'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.1-java/lib/logstash/filters/base.rb:171:in `filter_matched'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-filter-mutate-2.0.6/lib/logstash/filters/mutate.rb:230:in`filter'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.1-java/lib/logstash/filters/base.rb:151:in `multi_filter'", "org/jruby/RubyArray.java:1613:in`each'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.1-java/lib/logstash/filters/base.rb:148:in `multi_filter'", "(eval):154:in`initialize'", "org/jruby/RubyArray.java:1613:in `each'", "(eval):151:in`initialize'", "org/jruby/RubyProc.java:281:in `call'", "(eval):104:in`filter\_func'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.1-java/lib/logstash/pipeline.rb:267:in `filter_batch'", "org/jruby/RubyArray.java:1613:in`each'", "org/jruby/RubyEnumerable.java:852:in `inject'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.1-java/lib/logstash/pipeline.rb:265:in`filter\_batch'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.1-java/lib/logstash/pipeline.rb:223:in `worker_loop'", "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-core-2.4.1-java/lib/logstash/pipeline.rb:201:in`start\_workers'"], :level=\>:error}

**Configuration:**  
input {  
beats{  
port =\> 5044  
type =\> AD  
}  
}

filter {  
mutate{  
gsub =\> [ "message", "\n", "",  
"message", "\t", " "  
]  
}  
mutate{  
convert =\> { "event\_id" =\> "integer" }  
}  
if [event\_id] in [4624, 4625] {  
mutate {  
add\_field =\> {  
"message" =\> "EventID=%{event\_id}"  
}  
add\_field =\> {  
"message" =\> "Origin=%{[event\_id][WorkstationName]}"  
}  
add\_field =\> {  
"message" =\> "Status=%{Keywords}"  
}  
}  
}  
}

output {

```
    if [event_id] in [4720, 4722, 4725, 4726, 5136, 4740, 4624, 4625, 4738, 529, 533, 539, 552, 4735, 4657, 7045, 4698, 4702] {
           stdout { codec => rubydebug }
           syslog {
                   host => "10.107.105.239"
                   port => 514
                   protocol => "tcp"
                   rfc => "rfc5424"
                   appname => "adlogs"
           }
                elasticsearch {
                            hosts => elasticsearchserver
                            ssl => true
                            cacert => "/etc/logstash/pki/caroottest.pem"
                            index => "adlogs-%{+YYYY.MM.dd}"
                            user => "logstash"
                            password => "logstash"
                }
    }

```

}

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 4:27am UTC](https://discuss.elastic.co/t/cannot-convert-string-into-integer/56588/5 "2017-07-06T04:27:16Z")

</div>


