# Error - Failed to execute action

**URL:** <https://discuss.elastic.co/t/error-failed-to-execute-action/151101>\
**Category:** Elasticsearch\
**Created:** [October 4, 2018, 6:55pm UTC](https://discuss.elastic.co/t/error-failed-to-execute-action/151101 "2018-10-04T18:55:28Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yolanda\_Goncalves](https://avatars.discourse-cdn.com/v4/letter/y/258eb7/32.png) [@Yolanda\_Goncalves](https://discuss.elastic.co/u/Yolanda_Goncalves)\
**Post date:** [October 4, 2018, 6:55pm UTC](https://discuss.elastic.co/t/error-failed-to-execute-action/151101/1 "2018-10-04T18:55:28Z")

</div>

Hi,

I am trying to input a csv file trought logstash but I am getting the following error message:

[root@wazuh-server logstash]# ./bin/logstash -f logstash\_scan.config  
WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults  
Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs errors to the console  
[WARN] 2018-10-04 09:53:41.086 [LogStash::Runner] multilocal - Ignoring the 'pipelines.yml' file because modules or command line options are specified  
[INFO] 2018-10-04 09:53:42.120 [LogStash::Runner] runner - Starting Logstash {"logstash.version"=\>"6.4.0"}  
[ERROR] 2018-10-04 09:53:43.012 [Converge PipelineAction::Create] agent - Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, input, filter, output at line 7, column 1 (byte 99) after ", :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:41:in `compile_imperative'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:49:in`compile\_graph'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:11:in `block in compile_sources'", "org/jruby/RubyArray.java:2486:in`map'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:10:in `compile_sources'", "org/logstash/execution/AbstractPipelineExt.java:157:in`initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:22:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:90:in`initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline\_action/create.rb:38:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:309:in`block in converge\_state'"]}

and here is my config file:

input {  
file {  
path =\> "/usr/share/logstash/usi\_scan.csv"  
start\_position =\> "beginning"  
}  
}  
filer {  
csv {  
separator =\> ";"  
colums =\> [Risk;Host;Universo]  
}  
}  
output {  
elasticsearch {  
hosts =\> "localhost"  
index =\> "vulns"  
document\_type =\> "find\_vulns"  
stdout {}  
}  
}

Can someone please help me?  
Thank you!

---

<div class="post-metadata">

**Author:** ![pjanzen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pjanzen/32/13756_2.png) [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Post date:** [October 4, 2018, 7:10pm UTC](https://discuss.elastic.co/t/error-failed-to-execute-action/151101/2 "2018-10-04T19:10:49Z")

</div>

> [@Yolanda\_Goncalves](#):
>
> filer

There is a typo filer should be filter

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 1, 2018, 7:10pm UTC](https://discuss.elastic.co/t/error-failed-to-execute-action/151101/3 "2018-11-01T19:10:54Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.