# Error after upgrading to Logstash 7.1.1

**URL:** <https://discuss.elastic.co/t/error-after-upgrading-to-logstash-7-1-1/192147>\
**Category:** Logstash\
**Created:** [July 24, 2019, 10:46pm UTC](https://discuss.elastic.co/t/error-after-upgrading-to-logstash-7-1-1/192147 "2019-07-24T22:46:55Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Reena\_Deberry](https://avatars.discourse-cdn.com/v4/letter/r/f4b2a3/32.png) [@Reena\_Deberry](https://discuss.elastic.co/u/Reena_Deberry)\
**Post date:** [July 24, 2019, 10:46pm UTC](https://discuss.elastic.co/t/error-after-upgrading-to-logstash-7-1-1/192147/1 "2019-07-24T22:46:55Z")

</div>

```
    [ERROR][logstash.agent] Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:main, :exception=>"LogStash::ConfigurationError", :message=>"Something is wrong with your configuration.", :backtrace=>["/usr/share/logstash/logstash-core/lib/logstash/config/mixin.rb:86:in `config_init'", "/usr/share/logstash/logstash-core/lib/logstash/outputs/base.rb:60:in `initialize'", "org/logstash/config/ir/compiler/OutputStrategyExt.java:232:in `initialize'", "org/logstash/config/ir/compiler/OutputDelegatorExt.java:48:in `initialize'", "org/logstash/config/ir/compiler/OutputDelegatorExt.java:30:in `initialize'", "org/logstash/plugins/PluginFactoryExt.java:239:in `plugin'", "org/logstash/plugins/PluginFactoryExt.java:137:in `buildOutput'", "org/logstash/execution/JavaBasePipelineExt.java:50:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:23:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:36:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:325:in `block in converge_state'"]}

```

Here is my custom input file, thanks for any assistance in advance:

input {

file {  
# glob syntax for filename matching is explained here:  
# [https://www.elastic.co/guide/en/logstash/current/glob-support.html](https://www.elastic.co/guide/en/logstash/current/glob-support.html)  
path =\> ["/var/log/adc/2019/_/_/adc.log",  
"/var/log/adc/2019/_/_/asdi.log",  
"/var/log/adc/2019/_/_/edct\_cdm\_flight\_data.log",  
"/var/log/adc/2019/_/_/flightaware.log",  
"/var/log/adc/2019/_/_/flight\_manager.log",  
"/var/log/adc/2019/_/_/fp.log",  
"/var/log/adc/2019/_/_/invalid\_outgoing.log",  
"/var/log/adc/2019/_/_/iridium.log",  
"/var/log/adc/2019/_/_/met\_error.log",  
"/var/log/adc/2019/_/_/microservice.log",  
"/var/log/adc/2019/_/_/mq\_output.log",  
"/var/log/adc/2019/_/_/performance.log",  
"/var/log/adc/2019/_/_/position\_data.log",  
"/var/log/adc/2019/_/_/rmqapps.log",  
"/var/log/adc/2019/_/_/sbbtraffic.log",  
"/var/log/adc/2019/_/_/schneider.log",  
"/var/log/adc/2019/_/_/skyguide\_notams.log",  
"/var/log/adc/2019/_/_/sql.log",  
"/var/log/adc/2019/_/_/unparsed.log",  
"/var/log/adc/2019/_/_/wx.log",  
"/var/log/adc/2019/_/_/flightkeys.log",  
"/var/log/adc/2019/_/_/fp\_formatter.log",  
"/var/log/sys/2019/_/_/net-session\*",  
"/var/log/sys/2019/_/_/ad2api.log"  
]  
tags =\> ["standard\_adc\_format"]

```
  # default discover_interval is 15 sec
  discover_interval => 60

  # file where indexes into the current log file positions are stored
  sincedb_path => "/tmp/logstash-sincedb.db"

  # when a new log is first found, begin reading from the first line
  start_position => "beginning"

```

}

file {  
path =\> ["/var/log/adc/2019/_/_/api.log",  
"/var/log/adc/2019/_/_/dashboard.log"  
]  
tags =\> ["alt\_adc\_format"]

```
  # default discover_interval is 15 sec
  discover_interval => 60

  # file where indexes into the current log file positions are stored
  sincedb_path => "/tmp/logstash-sincedb2.db"

  # when a new log is first found, begin reading from the first line
  start_position => "beginning"

```

}

file {  
# FIXME: This is no longer the correct path for mail logs. Needs updated.  
path =\> ["/var/log/sys/2019/_/_/\*maillog"  
]  
tags =\> ["syslog\_format"]

```
  # default discover_interval is 15 sec
  discover_interval => 60

  # file where indexes into the current log file positions are stored
  sincedb_path => "/tmp/logstash-sincedb3.db"

  # when a new log is first found, begin reading from the first line
  start_position => "beginning"

```

}

file {  
path =\> ["/var/log/adc/2019/_/_/fp\_formatter.log"]  
tags =\> ["windward\_format"]

```
  # default discover_interval is 15 sec
  discover_interval => 60

  # file where indexes into the current log file positions are stored
  sincedb_path => "/tmp/logstash-sincedb3.db"

  # when a new log is first found, begin reading from the first line
  start_position => "beginning"

```

}  
}

filter {

```
if "standard_adc_format" in [tags] {
    if ".py" in [message] {
        # it's a log line from a python app with extra info
        grok {
            match => ["message", "^%{TIMESTAMP_ISO8601:logdate} <%{NOTSPACE:syslog}> %{NOTSPACE:hostname} %{NOTSPACE:appname}\[%{USERNAME:process_id}\] %{NOTSPACE:serverdate} %{NOTSPACE:servertime} %{WORD:loglevel} %{NUMBER:thread_id} %{NOTSPACE:source_file} %{POSINT:source_line} %{GREEDYDATA:message}" ]

            overwrite => ["message"]
        }
    } else {
        # it's a standard syslog format not generated by our python logging libs
        grok {
            match => ["message", "^%{TIMESTAMP_ISO8601:logdate} <%{NOTSPACE:syslog}> %{NOTSPACE:hostname} %{NOTSPACE:appname}\[%{USERNAME:process_id}\] %{GREEDYDATA:message}" ]
        }
    }
    mutate {
        gsub => [ "message", "<nl>", "

```

" ]  
}  
}

```
if "alt_adc_format" in [tags] {
    grok {
        match => ["message", "^%{TIMESTAMP_ISO8601:logdate} <%{NOTSPACE:syslog}> %{NOTSPACE:hostname} #\|%{NOTSPACE:date2} %{NOTSPACE:time2} %{WORD:loglevel} %{NUMBER:thread_id} %{NOTSPACE:source_file} %{POSINT:source_line} %{GREEDYDATA:message}"]

        overwrite => ["message"]
    }
    mutate {
        gsub => [ "message", "<nl>", "

```

" ]  
}  
}

```
if "syslog_format" in [tags] {
    grok {
        match => ["message", "^%{TIMESTAMP_ISO8601:logdate} <%{NOTSPACE:syslog}> %{NOTSPACE:hostname} %{NOTSPACE:appname} %{GREEDYDATA:message}"]
        overwrite => ["message"]
    }
}

if "windward_format" in [tags] {
    grok {
        match => ["message", "^%{TIMESTAMP_ISO8601:logdate} <%{NOTSPACE:syslog}> %{NOTSPACE:hostname} %{GREEDYDATA:message}"]
        overwrite => ["message"]
    }
}

date {
    match => ["logdate", "yyyy-MM-dd'T'HH:mm:ss"]
}

```

}

output {  
if "\_grokparsefailure" in [tags] {  
# write events that didn't match to a file  
file { "path" =\> "/tmp/grok\_failures.txt" }  
} else {  
elasticsearch { hosts =\> ["localhost:9200"]  
index =\> "logstash-%{+YYYY.MM}"  
}  
}

# for debugging:

# stdout { codec =\> rubydebug }

}

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [July 24, 2019, 11:34pm UTC](https://discuss.elastic.co/t/error-after-upgrading-to-logstash-7-1-1/192147/2 "2019-07-24T23:34:17Z")

</div>

> [@Reena\_Deberry](#):
>
> "Something is wrong with your configuration."

I would expect another error message, possibly multi-line, immediately preceding this. When I see this is is normally a plugin is detecting a problem, and logging a specific error, then logstash logs this very generic error. We need to see the specific error 🙂

---

<div class="post-metadata">

**Author:** ![Reena\_Deberry](https://avatars.discourse-cdn.com/v4/letter/r/f4b2a3/32.png) [@Reena\_Deberry](https://discuss.elastic.co/u/Reena_Deberry)\
**Post date:** [July 25, 2019, 12:46pm UTC](https://discuss.elastic.co/t/error-after-upgrading-to-logstash-7-1-1/192147/3 "2019-07-25T12:46:20Z")

</div>

So, the only entry in the log file has this info, it does successful startup and then immediately shuts down. Is there somewhere else i need to look for other errors?

[2019-07-25T12:44:31,066][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600}  
[2019-07-25T12:44:35,962][INFO][logstash.runner] Logstash shut down.  
[2019-07-25T12:44:58,294][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified  
[2019-07-25T12:44:58,313][INFO][logstash.runner] Starting Logstash {"logstash.version"=\>"7.1.1"}  
[2019-07-25T12:45:06,769][ERROR][logstash.outputs.file] Unknown setting '"path"' for file  
[2019-07-25T12:45:06,785][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Something is wrong with your configuration.", :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/config/mixin.rb:86:in `config_init'", "/usr/share/logstash/logstash-core/lib/logstash/outputs/base.rb:60:in`initialize'", "org/logstash/config/ir/compiler/OutputStrategyExt.java:232:in `initialize'", "org/logstash/config/ir/compiler/OutputDelegatorExt.java:48:in`initialize'", "org/logstash/config/ir/compiler/OutputDelegatorExt.java:30:in `initialize'", "org/logstash/plugins/PluginFactoryExt.java:239:in`plugin'", "org/logstash/plugins/PluginFactoryExt.java:137:in `buildOutput'", "org/logstash/execution/JavaBasePipelineExt.java:50:in`initialize'", "/usr/share/logstash/logstash-core/lib/logstash/java\_pipeline.rb:23:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:36:in`execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:325:in `block in converge\_state'"]}

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [July 25, 2019, 1:47pm UTC](https://discuss.elastic.co/t/error-after-upgrading-to-logstash-7-1-1/192147/4 "2019-07-25T13:47:35Z")

</div>

> [@Reena\_Deberry](#):
>
> Unknown setting '"path"' for file

That would suggest you have

```
input {
    file {
        "path" =>

```

rather than

```
input {
    file {
        path =>

```

---

<div class="post-metadata">

**Author:** ![Reena\_Deberry](https://avatars.discourse-cdn.com/v4/letter/r/f4b2a3/32.png) [@Reena\_Deberry](https://discuss.elastic.co/u/Reena_Deberry)\
**Post date:** [July 25, 2019, 1:57pm UTC](https://discuss.elastic.co/t/error-after-upgrading-to-logstash-7-1-1/192147/5 "2019-07-25T13:57:46Z")

</div>

The correct path is set... ![input_file](https://us1.discourse-cdn.com/elastic/original/3X/4/1/412b51a1d21cd710b9ac3e9033fdb13f112b84c4.jpeg)

---

<div class="post-metadata">

**Author:** ![Reena\_Deberry](https://avatars.discourse-cdn.com/v4/letter/r/f4b2a3/32.png) [@Reena\_Deberry](https://discuss.elastic.co/u/Reena_Deberry)\
**Post date:** [July 25, 2019, 9:01pm UTC](https://discuss.elastic.co/t/error-after-upgrading-to-logstash-7-1-1/192147/6 "2019-07-25T21:01:22Z")

</div>

NVM, Found the issue. It was the "path" below it was complaining about.

file { "path" =\> "/tmp/grok\_failures.txt" }

thanks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 22, 2019, 9:01pm UTC](https://discuss.elastic.co/t/error-after-upgrading-to-logstash-7-1-1/192147/7 "2019-08-22T21:01:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.