Hi Aaron, Thanks for the reply. I have changed my config and action to png images as for some reason this pre-formatted text is not working. Sorry I am very new to this group.
As such I am sure that the syntax of yaml should be good as I am just using the samples.
Also after some googling it seems like the error is related to date parsing by python. I cross checked that all my logstash index names are actually having dates in the format specified in action file i.e. timestring: '%Y.%m.%d'
So now I am completely clueless what is really happening.