# ConfigurationError Expected one of #, {, } at line 13, column 121 **URL:** \ **Category:** Logstash\ **Created:** [January 9, 2018, 8:11am UTC](https://discuss.elastic.co/t/configurationerror-expected-one-of-at-line-13-column-121/114658 "2018-01-09T08:11:36Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![yuganshu4042](https://avatars.discourse-cdn.com/v4/letter/y/ad7895/32.png) [@yuganshu4042](https://discuss.elastic.co/u/yuganshu4042)\ **Post date:** [January 9, 2018, 8:11am UTC](https://discuss.elastic.co/t/configurationerror-expected-one-of-at-line-13-column-121/114658/1 "2018-01-09T08:11:36Z")
/\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*Filtered Data need to send on elasticSearch \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*/ 15:33:43.214 [tomcat-http--1] DEBUG com.txxixxd.cc.gatx.rePoinx - POSRequest {"enterpriseId":"5a4dd83a6c085324048fbbd1","storeId":"4042","requestPayload":{"firstname":"Ravi","lastname":"Kumar","dateofbirth":"1991-08-16 [00:00:00","emailid":"raxxxkumar@yxxxxxxx.in](mailto:00:00:00%22,%22emailid%22:%22raxxxkumar@yxxxxxxx.in)","mobile":"753083xxx","pagesize":"10","pagenumber":"1","sortdirection":"","culturename":"","utcoffset":"0","membershipcardnumber":"","sortexpression":"","event":"searchcustomer"}} /\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* grook code for data \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*/ %{URIHOST}:%{BASE16FLOAT} %{SYSLOG5424SD} DEBUG %{JAVACLASS} - POSRequest {%{QS}:%{QS},%{QS}:%{QS},%{QS}:{%{QS}:%{QS},%{QS}:%{QS},%{QS}:%{QS},%{QS}:%{QS},%{QS}:%{QS},%{QS}:%{QS},%{QS}:%{QS},%{QS}:"","culturename":"","utcoffset":"0","membershipcardnumber":"","sortexpression":"","event":"searchcustomer"}} /\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*Configuration File \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*/ input { ``` file { path =>["C:/logdir/*.log"] type =>"logs" } ``` } filter { grok { match =\> { "message" =\> "%{QS}:%{QS},%{QS}:%{QS},%{QS}:%{QS},%{QS}:%{QS},%{QS}:%{QS},%{QS}:%{QS},%{QS}:%{QS},%{QS}:"","culturename":"","utcoffset":"0","membershipcardnumber":"","sortexpression":"","event":"searchcustomer","apiTypeResolver":"api","providerCode":"LPMMK","credential":{"providerOutletId":"1901","merchantOutletId":"pWtU4cWTOoP3mzAdDAhBClYXuGgSDagrfgiMQqWoAlw="},"clientType":"101","providerType":"1","metadata":{"enterpriseMetadata":{"enterpriseId":"5a4dd83a6c085324048fbbd1"},"storeMetadata":{"storeCode":"4042"},"requestMetadata":{"requestUid":"675f6ab7-5f60%{ISO8601\_TIMEZONE}f-bf25-9262ca8e4413","mqReferenceNo":"46e6cf84-0ef3-48a9-8bf4-e2b88a01f4d8"}}" } } date { match =\> ["timestamp" , "dd/MMM/yyyy:HH:mm:ss Z"] } } output { elasticsearch { hosts =\> ["localhost:9200"] } stdout { codec =\> rubydebug } } /\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* Error on Logstash Logs \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*/ [2018-01-09T13:37:18,438][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, {, } at line 13, column 121 (byte 208) after filter {\n grok {\n match =\> { "message" =\> "%{QS}:%{QS},%{QS}:%{QS},%{QS}:%{QS},%{QS}:%{QS},%{QS}:%{QS},%{QS}:%{QS},%{QS}:%{QS},%{QS}:"", :backtrace=\>["C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/logstash-core/lib/logstash/compiler.rb:42:in `compile_imperative'", "C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/logstash-core/lib/logstash/compiler.rb:50:in`compile\_graph'", "C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/logstash-core/lib/logstash/compiler.rb:12:in `block in compile_sources'", "org/jruby/RubyArray.java:2486:in`map'", "C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/logstash-core/lib/logstash/compiler.rb:11:in `compile_sources'", "C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/logstash-core/lib/logstash/pipeline.rb:51:in`initialize'", "C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/logstash-core/lib/logstash/pipeline.rb:171:in `initialize'", "C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/logstash-core/lib/logstash/pipeline_action/create.rb:40:in`execute'", "C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/logstash-core/lib/logstash/agent.rb:335:in `block in converge_state'", "C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/logstash-core/lib/logstash/agent.rb:141:in`with\_pipelines'", "C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/logstash-core/lib/logstash/agent.rb:332:in `block in converge_state'", "org/jruby/RubyArray.java:1734:in`each'", "C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/logstash-core/lib/logstash/agent.rb:319:in `converge_state'", "C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/logstash-core/lib/logstash/agent.rb:166:in`block in converge\_state\_and\_update'", "C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/logstash-core/lib/logstash/agent.rb:141:in `with_pipelines'", "C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/logstash-core/lib/logstash/agent.rb:164:in`converge\_state\_and\_update'", "C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/logstash-core/lib/logstash/agent.rb:90:in `execute'", "C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/logstash-core/lib/logstash/runner.rb:343:in`block in execute'", "C:/Users/pankajsharma/Downloads/logstash-6.1.1/logstash-6.1.1/vendor/bundle/jruby/2.3.0/gems/stud-0.0.23/lib/stud/task.rb:24:in `block in initialize'"]} ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [January 9, 2018, 8:20am UTC](https://discuss.elastic.co/t/configurationerror-expected-one-of-at-line-13-column-121/114658/2 "2018-01-09T08:20:07Z")
Are you asking for assistance? ---
**Author:** ![yuganshu4042](https://avatars.discourse-cdn.com/v4/letter/y/ad7895/32.png) [@yuganshu4042](https://discuss.elastic.co/u/yuganshu4042)\ **Post date:** [January 9, 2018, 9:07am UTC](https://discuss.elastic.co/t/configurationerror-expected-one-of-at-line-13-column-121/114658/3 "2018-01-09T09:07:37Z")
yes. Its my first time working on this. I don't have any idea regarding this. So I would like if assistance is there. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [January 9, 2018, 9:10am UTC](https://discuss.elastic.co/t/configurationerror-expected-one-of-at-line-13-column-121/114658/4 "2018-01-09T09:10:12Z")
You should read [https://www.elastic.co/help](https://www.elastic.co/help) to get a better idea of how best to ask questions here so that we can help you in the most effective way. Because posting an error and your config with no other information isn't likely to get you many responses. ---
**Author:** ![yuganshu4042](https://avatars.discourse-cdn.com/v4/letter/y/ad7895/32.png) [@yuganshu4042](https://discuss.elastic.co/u/yuganshu4042)\ **Post date:** [January 9, 2018, 9:19am UTC](https://discuss.elastic.co/t/configurationerror-expected-one-of-at-line-13-column-121/114658/5 "2018-01-09T09:19:36Z")
Check once. I post the full issue ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [January 9, 2018, 9:32am UTC](https://discuss.elastic.co/t/configurationerror-expected-one-of-at-line-13-column-121/114658/6 "2018-01-09T09:32:43Z")
Please format the configuration properly using the `` button in the toolbar. It is very hard to read and identify any issues as it is now. ---
**Author:** ![yuganshu4042](https://avatars.discourse-cdn.com/v4/letter/y/ad7895/32.png) [@yuganshu4042](https://discuss.elastic.co/u/yuganshu4042)\ **Post date:** [January 11, 2018, 11:21am UTC](https://discuss.elastic.co/t/configurationerror-expected-one-of-at-line-13-column-121/114658/7 "2018-01-11T11:21:36Z")
I Got the Solution . Thanks for the contribution of time 🙂 ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [January 11, 2018, 11:25am UTC](https://discuss.elastic.co/t/configurationerror-expected-one-of-at-line-13-column-121/114658/8 "2018-01-11T11:25:08Z")
What was the solution? ---
**Author:** ![yuganshu4042](https://avatars.discourse-cdn.com/v4/letter/y/ad7895/32.png) [@yuganshu4042](https://discuss.elastic.co/u/yuganshu4042)\ **Post date:** [January 12, 2018, 6:26am UTC](https://discuss.elastic.co/t/configurationerror-expected-one-of-at-line-13-column-121/114658/9 "2018-01-12T06:26:43Z")
The Solution was , The Grok pattern which i was making that was not correct. Basically what i do is, we know the log line i did this, %{TIME:Time} %{SYSLOG5424SD} %{LOGLEVEL:LoggerName} %{JAVACLASS} - %{DATA:requestType} {%{QS:id}:(?:.\*),%{QS:requestId}:%{QS:requestId},%{QS:messageReferenceNo}:%{QS:messageReferenceNo},%{QS:retailModule}:%{QS:retailModule},%{QS:event}:%{QS:event},%{QS:enterpriseId}:%{QS:enterpriseId},%{QS:storeId}:%{QS:storeId},%{QS:payload}:%{QS:payload},%{QS:requestTime}:%{NUMBER:requestTime},%{QS:auditAction}:%{NUMBER:auditAction}} ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 9, 2018, 6:27am UTC](https://discuss.elastic.co/t/configurationerror-expected-one-of-at-line-13-column-121/114658/10 "2018-02-09T06:27:04Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.