# Erro after install **URL:** \ **Category:** Logstash\ **Created:** [June 14, 2018, 1:15pm UTC](https://discuss.elastic.co/t/erro-after-install/135923 "2018-06-14T13:15:16Z")\ **Posts on this page:** 16\ **Page:** 1
**Author:** ![Andras\_Klambauer](https://avatars.discourse-cdn.com/v4/letter/a/ce73a5/32.png) [@Andras\_Klambauer](https://discuss.elastic.co/u/Andras_Klambauer)\ **Post date:** [June 14, 2018, 1:15pm UTC](https://discuss.elastic.co/t/erro-after-install/135923/1 "2018-06-14T13:15:16Z")
I just installed the logstash next to graylog and I got this erros all the time: 2018-06-14T13:33:05,268][INFO][logstash.runner] Starting Logstash {"logstash.version"=\>"6.3.0"} [2018-06-14T13:33:06,013][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, { at line 11, column 1 (byte 141) after output \n", :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:42:in `compile_imperative'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:50:in`compile\_graph'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:12:in `block in compile_sources'", "org/jruby/RubyArray.java:2486:in`map'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:11:in `compile_sources'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:49:in`initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:167:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:40:in`execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:305:in `block in converge\_state'"]} [2018-06-14T13:33:06,368][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600} somebody can help me pls! ---
**Author:** ![CDR](https://avatars.discourse-cdn.com/v4/letter/c/d9b06d/32.png) [@CDR](https://discuss.elastic.co/u/CDR)\ **Post date:** [June 14, 2018, 1:20pm UTC](https://discuss.elastic.co/t/erro-after-install/135923/2 "2018-06-14T13:20:24Z")
> [@Andras\_Klambauer](#): > > {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, { at line 11, column 1 (byte 141) after output \n", This looks to be a configuration error. Could you attach your logstash.conf file? ---
**Author:** ![Andras\_Klambauer](https://avatars.discourse-cdn.com/v4/letter/a/ce73a5/32.png) [@Andras\_Klambauer](https://discuss.elastic.co/u/Andras_Klambauer)\ **Post date:** [June 14, 2018, 1:55pm UTC](https://discuss.elastic.co/t/erro-after-install/135923/3 "2018-06-14T13:55:26Z")
Thx, for the quick reply, where can I find it? /etc/logstash/conf.d/? it is a totally fresh install. ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [June 14, 2018, 1:58pm UTC](https://discuss.elastic.co/t/erro-after-install/135923/4 "2018-06-14T13:58:28Z")
Surely you know where you have stored your configuration files? Logstash isn't bundled with any configuration. ---
**Author:** ![Andras\_Klambauer](https://avatars.discourse-cdn.com/v4/letter/a/ce73a5/32.png) [@Andras\_Klambauer](https://discuss.elastic.co/u/Andras_Klambauer)\ **Post date:** [June 14, 2018, 2:18pm UTC](https://discuss.elastic.co/t/erro-after-install/135923/5 "2018-06-14T14:18:38Z")
This is my first time install, I just checked the deamon and the logs and saw the erros. Where I need to create a conf file? ---
**Author:** ![CDR](https://avatars.discourse-cdn.com/v4/letter/c/d9b06d/32.png) [@CDR](https://discuss.elastic.co/u/CDR)\ **Post date:** [June 14, 2018, 3:34pm UTC](https://discuss.elastic.co/t/erro-after-install/135923/6 "2018-06-14T15:34:24Z")
[https://www.elastic.co/guide/en/logstash/current/dir-layout.html](https://www.elastic.co/guide/en/logstash/current/dir-layout.html) This is the directory layout. I am guessing you are using a Linux machine so look at the distribution you used. Otherwise you can change the location Logstash looks for its configuration file by changing the path.config in the logstash.yml file. ---
**Author:** ![Andras\_Klambauer](https://avatars.discourse-cdn.com/v4/letter/a/ce73a5/32.png) [@Andras\_Klambauer](https://discuss.elastic.co/u/Andras_Klambauer)\ **Post date:** [June 15, 2018, 11:23am UTC](https://discuss.elastic.co/t/erro-after-install/135923/7 "2018-06-15T11:23:35Z")
Thx. I made a blank logstash.conf file here /etc/logstash/conf.d same error msg. what I need to change and where? I tired to config but no luck. ---
**Author:** ![CDR](https://avatars.discourse-cdn.com/v4/letter/c/d9b06d/32.png) [@CDR](https://discuss.elastic.co/u/CDR)\ **Post date:** [June 15, 2018, 12:11pm UTC](https://discuss.elastic.co/t/erro-after-install/135923/8 "2018-06-15T12:11:15Z")
In the logstash.yml file the path.config path needs to be set like this: > path.config: /etc/logstash/conf.d/logstash.conf Now you need to configure the logstash.conf file to what you want. ---
**Author:** ![Andras\_Klambauer](https://avatars.discourse-cdn.com/v4/letter/a/ce73a5/32.png) [@Andras\_Klambauer](https://discuss.elastic.co/u/Andras_Klambauer)\ **Post date:** [June 15, 2018, 12:39pm UTC](https://discuss.elastic.co/t/erro-after-install/135923/9 "2018-06-15T12:39:53Z")
> [@CDR](#): > > > path.config: /etc/logstash/conf.d/logstash.conf [2018-06-15T14:34:51,557][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, input, filter, output at line 1, column 1 (byte 1) after ", :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:42:in `compile_imperative'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:50:in `compile\_graph'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:12:in `block in compile_sources'", "org/jruby/RubyArray.java:2486:in `map'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:11:in `compile_sources'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:49:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:167:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:40:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:305:in `block in converge\_state'"]} [2018-06-15T14:34:51,976][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600} ---
**Author:** ![CDR](https://avatars.discourse-cdn.com/v4/letter/c/d9b06d/32.png) [@CDR](https://discuss.elastic.co/u/CDR)\ **Post date:** [June 15, 2018, 12:40pm UTC](https://discuss.elastic.co/t/erro-after-install/135923/10 "2018-06-15T12:40:33Z")
Post your config file ---
**Author:** ![Andras\_Klambauer](https://avatars.discourse-cdn.com/v4/letter/a/ce73a5/32.png) [@Andras\_Klambauer](https://discuss.elastic.co/u/Andras_Klambauer)\ **Post date:** [June 15, 2018, 1:06pm UTC](https://discuss.elastic.co/t/erro-after-install/135923/11 "2018-06-15T13:06:44Z")
[http://gofile.me/6yg5C/75BRyTOZL](http://gofile.me/6yg5C/75BRyTOZL) u can download from here ---
**Author:** ![CDR](https://avatars.discourse-cdn.com/v4/letter/c/d9b06d/32.png) [@CDR](https://discuss.elastic.co/u/CDR)\ **Post date:** [June 15, 2018, 1:56pm UTC](https://discuss.elastic.co/t/erro-after-install/135923/12 "2018-06-15T13:56:11Z")
Can you just post the text of your config file. I am having a hard time connecting to that site. ---
**Author:** ![Andras\_Klambauer](https://avatars.discourse-cdn.com/v4/letter/a/ce73a5/32.png) [@Andras\_Klambauer](https://discuss.elastic.co/u/Andras_Klambauer)\ **Post date:** [June 15, 2018, 3:05pm UTC](https://discuss.elastic.co/t/erro-after-install/135923/13 "2018-06-15T15:05:55Z")
> [@Andras\_Klambauer](#): > > /etc/logstash/conf.d/logstash.conf /etc/logstash/conf.d/logstash.conf file is empty, I just create one- maybe I need to set some default config?? ---
**Author:** ![CDR](https://avatars.discourse-cdn.com/v4/letter/c/d9b06d/32.png) [@CDR](https://discuss.elastic.co/u/CDR)\ **Post date:** [June 15, 2018, 3:29pm UTC](https://discuss.elastic.co/t/erro-after-install/135923/14 "2018-06-15T15:29:02Z")
I think you may need to do some reading about Logstash and how it works. [https://www.elastic.co/guide/en/logstash/6.3/introduction.html](https://www.elastic.co/guide/en/logstash/6.3/introduction.html) ---
**Author:** ![Andras\_Klambauer](https://avatars.discourse-cdn.com/v4/letter/a/ce73a5/32.png) [@Andras\_Klambauer](https://discuss.elastic.co/u/Andras_Klambauer)\ **Post date:** [June 15, 2018, 4:22pm UTC](https://discuss.elastic.co/t/erro-after-install/135923/15 "2018-06-15T16:22:23Z")
I just want to encode a log steram from lantin-2 to ltani-1 or utf8 because a collect the logs with graylog. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 13, 2018, 4:22pm UTC](https://discuss.elastic.co/t/erro-after-install/135923/16 "2018-07-13T16:22:26Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.