# \[ERROR\]\[logstash.agent\] Failed to execute action "Expected one of #, {, } at line 161, column 185 (byte 16646) after input {\\r\\n\\tjdbc {\\r\\n\\t\\tjdbc\_driver\_library =\> \\ **URL:** \ **Category:** Logstash\ **Created:** [October 29, 2019, 12:09am UTC](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-expected-one-of-at-line-161-column-185-byte-16646-after-input-r-n-tjdbc-r-n-t-tjdbc-driver-library/205566 "2019-10-29T00:09:38Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![jogabonito](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jogabonito/32/56737_2.png) [@jogabonito](https://discuss.elastic.co/u/jogabonito)\ **Post date:** [October 29, 2019, 12:09am UTC](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-expected-one-of-at-line-161-column-185-byte-16646-after-input-r-n-tjdbc-r-n-t-tjdbc-driver-library/205566/1 "2019-10-29T00:09:38Z")
Hi I get this error message while trying to indexing data to elasticsearch. Does anyone have an idea what could cause this error? [2019-10-04T17:00:02,272][ERROR][logstash.agent] Failed to execute ac tion {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"L ogStash::ConfigurationError", :message=\>"Expected one of #, {, } at line 161, co lumn 185 (byte 16646) after input {\r\n\tjdbc {\r\n\t\tjdbc\_driver\_library =\> " C:\Elastic\logstash-7.2.0\vendor\oracle\ojdbc7.jar" #Endre egen Logstash\r \n\t\t\r\n\t\tjdbc\_driver\_class =\> "Java::oracle.jdbc.driver.OracleDriver"\r\n \t\t\r\n\t\tjdbc\_connection\_string =\> "jdbc:oracle:thin:@source" #Endre DB\r\n\t\t\r\n\t\tjdbc\_user =\> "USERNAME" #Endre DB\r\n\t\t\r\n\t tjdbc\_password =\> "PASSWORD" #Endre DB\r\n\t\t\r\n#\t\tschedule =\> "0 \* \* \* \*" [2019-10-04T17:00:02,802][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600} [2019-10-04T17:00:07,576][INFO][logstash.runner] Logstash shut down. I use the following config file: (I replaced the acutal values with the following: @source jdbc\_user =\> "USERNAME" jdbc\_password =\> "PASSWORD") * * * input { jdbc { jdbc\_driver\_library =\> "C:\Elastic\logstash-7.2.0\vendor\oracle\ojdbc7.jar" #Endre egen Logstash ``` jdbc_driver_class => "Java::oracle.jdbc.driver.OracleDriver" jdbc_connection_string => "jdbc:oracle:thin:@source" #Endre DB jdbc_user => "USERNAME" #Endre DB jdbc_password => "PASSWORD" #Endre DB ``` # schedule =\> "0 \* \* \* \*" #Every hour Starter hvert 0 minutt, Ved å konvertere ut så starter den umiddelbart ``` add_field => { "[@metadata][source_type]" => "laco-netteier-elwin-nett" } #Endre DB Filnavn: Bruker-Kunde-Avdeling-System-Formål ``` #Endre statement =\> " --Netteier - Detaljert select --Målepunkt/Anlegg efm.maalepktnr as mpnr , efm.maalepunkt as ean from felles.v\_gui\_efmaalepunkt efm, kunde.v\_ekkontrakt\_admin ekk, kunde.ekkontrakthist ekkh, kunde.ekresept ekr, felles.efjurperson efj, felles.v\_adresse\_maalepunkt a, komponent.v\_emkomponent emk, komponent.v\_emkomptype emkt, tilsyn.v\_tilsynsobjekt\_admin tilsyn --, felles.v\_adresse\_jurperson adr, felles.v\_adresse\_reskontro err where 1=1 and efm.maalepktnr = a.maalepktnr and efm.maalepktnr = ekk.maalepktnr(+) and ekk.kundenr = efj.jurpersonid(+) and efm.netteigar in(20001) and ekk.valstatus in('A') and ekk.kundenr = ekkh.kundenr(+) and ekk.kontraktnr = ekkh.kontraktnr(+) and ekkh.reseptnr = ekr.reseptnr(+) and ekkh.tarfradato \<= sysdate and ekkh.tartildato \> sysdate and ekr.reseptgrpnr in(20) --20. Nettariff and efm.maalepktnr = emk.maalepktnr(+) and emk.komptypenr = emkt.komptypenr(+) and emk.komptypeid(+) in(1) and emk.plasseringid(+) in(1) and efm.anleggnr = tilsyn.anleggnr(+) and a.fradato = (select max(a1.fradato) from felles.v\_adresse\_maalepunkt a1 where a.maalepktnr = a1.maalepktnr) and (efm.mpgroupingid is null or efm.mpgroupingid not in(225)) --225.AMS Nettnytte NS --and efm.maalepktnr in(44565) and rownum \< 10 order by 1,2 " } } filter { if [@metadata][source\_type] == "laco-netteier-elwin-nett" { #Endre DB Filnavn } } output { if [@metadata][source\_type] == "laco-netteier-elwin-nett" { #Endre DB Filnavn elasticsearch { hosts =\> ["[https://4b9343dad4744941a7e38ed0f30b6237.eu-west-1.aws.found.io:9243](https://4b9343dad4744941a7e38ed0f30b6237.eu-west-1.aws.found.io:9243)"] user =\> "XXXXXXX" password =\> "XXXXXXXXXXX" index =\> "%{[@metadata][source\_type]}" #Endre document\_id =\> "%{kundenr} %{kontraktnr}" #Endre Unik ID } } ``` stdout { # codec => rubydebug #På = Ser hver enkelt kolonne fra spørringen som et json objekt i cmd-vindu, som er enklere ved testing/verifisering codec => dots #På = Ser hver kolonne fra spørring som en dot, som er enklere ved kjøring i produksjon } ``` } ---
**Author:** ![st3inbeiss](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/st3inbeiss/32/55332_2.png) [@st3inbeiss](https://discuss.elastic.co/u/st3inbeiss)\ **Post date:** [October 29, 2019, 2:48pm UTC](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-expected-one-of-at-line-161-column-185-byte-16646-after-input-r-n-tjdbc-r-n-t-tjdbc-driver-library/205566/2 "2019-10-29T14:48:08Z")
Something seems fishy in your input block. Try to offload your SQL Statement into a separate file: [https://www.elastic.co/guide/en/logstash/current/plugins-inputs-jdbc.html#plugins-inputs-jdbc-statement\_filepath](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-jdbc.html#plugins-inputs-jdbc-statement_filepath) And remove as many comments/unused characters as possible. ---
**Author:** ![jogabonito](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jogabonito/32/56737_2.png) [@jogabonito](https://discuss.elastic.co/u/jogabonito)\ **Post date:** [October 29, 2019, 10:55pm UTC](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-expected-one-of-at-line-161-column-185-byte-16646-after-input-r-n-tjdbc-r-n-t-tjdbc-driver-library/205566/3 "2019-10-29T22:55:40Z")
> [@st3inbeiss](#): > > And remove as many comments/unused characters as possible. Thanks a lot! I will try to remove all the commenting and unused characters! The sql query is running and gives me the wanted result when I try to run it in the SQL Developer tool. ---
**Author:** ![st3inbeiss](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/st3inbeiss/32/55332_2.png) [@st3inbeiss](https://discuss.elastic.co/u/st3inbeiss)\ **Post date:** [October 30, 2019, 8:00am UTC](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-expected-one-of-at-line-161-column-185-byte-16646-after-input-r-n-tjdbc-r-n-t-tjdbc-driver-library/205566/4 "2019-10-30T08:00:55Z")
> The sql query is running and gives me the wanted result when I try to run it in the SQL Developer tool. This is entierly possible, logstash could have a problem with a character in the query itself (sorry if I can't tell exactly, the query was formatted in your initial post). Logstash may not be able to parse your config file then. Removing the query from the config file and placing it into a separate file should solve this and make your config waaaay more readable. Let us know if you succeed! 🙂 ---
**Author:** ![jogabonito](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jogabonito/32/56737_2.png) [@jogabonito](https://discuss.elastic.co/u/jogabonito)\ **Post date:** [October 31, 2019, 12:55am UTC](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-expected-one-of-at-line-161-column-185-byte-16646-after-input-r-n-tjdbc-r-n-t-tjdbc-driver-library/205566/5 "2019-10-31T00:55:01Z")
Hi! Thanks again I digged down in the error message from Logstash together with the sql query and found one column/field that caused this problem. The error message contains several messages like this: **error\_message=\>""\xBA" from ASCII-8BIT to UTF-8"** **error\_message=\>""\xAF" from ASCII-8BIT to UTF-8"** **error\_message=\>""\xCD" from ASCII-8BIT to UTF-8"** Googled these error messages and it was supposedly some problems converting the content between different formats or reading the content of one of the columns. I remembered that my query contains a column with a unique long sequence of both numbers and text ex: "928BEE3A365D4D80B43CD88B9DB8B759"... Removed this column (commented it out) from the sql query and it ran nicely indexing the result to elasticsearch. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 28, 2019, 12:55am UTC](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-expected-one-of-at-line-161-column-185-byte-16646-after-input-r-n-tjdbc-r-n-t-tjdbc-driver-library/205566/6 "2019-11-28T00:55:19Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.