# Errors in while starting Logstash

**URL:** https://discuss.elastic.co/t/errors-in-while-starting-logstash/117797
**Category:** Logstash
**Created:** [January 31, 2018, 11:42am UTC](https://discuss.elastic.co/t/errors-in-while-starting-logstash/117797 "2018-01-31T11:42:11Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![script007](https://avatars.discourse-cdn.com/v4/letter/s/3ec8ea/32.png) [@script007](https://discuss.elastic.co/u/script007)
#### Post date: [January 31, 2018, 11:42am UTC](https://discuss.elastic.co/t/errors-in-while-starting-logstash/117797/1 "2018-01-31T11:42:11Z")

</div>

# I feel something is not right in my conf file. Ant help. I am not able to start this conf file. Conf File:

input {  
file {  
path =\> "/data/es/snmp/stage/snmp.csv"  
start\_position =\> "beginning"  
sincedb\_path =\> "/dev/null"  
}  
}  
filter {  
csv {  
separator =\> ","  
columns =\> ["Date","Time","Block","Name","IP","Device","[Sr.No](http://Sr.No)","Alert Message" ]  
}  
mutate { merge ==\> ["Date","Time]}

# date { match =\> ["Date", "dd-MMM-YYYY HH:mm:ss"] locale =\> "en" remove\_field =\> ["Date"] } mutate { convert =\> { "Block" =\> "float" } convert =\> { "Name" =\> "float" } convert =\> { "IP" =\> "float" } convert =\> { "Device" =\> "float" } convert =\> { "[Sr.No](http://Sr.No)" =\> "float" } convert =\> { "Alert Message" =\> "float" } } } output { elasticsearch { action =\> "index" hosts =\> ['localhost:9200'] index =\> "alerts" workers =\> 1 } stdout {} }

Error Message

# [2018-01-31T11:40:09,441][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"fb\_apache", :directory=\>"/usr/share/logstash/modules/fb\_apache/configuration"} [2018-01-31T11:40:09,448][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"netflow", :directory=\>"/usr/share/logstash/modules/netflow/configuration"} [2018-01-31T11:40:09,907][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified [2018-01-31T11:40:10,148][FATAL][logstash.runner] The given configuration is invalid. Reason: Expected one of #, =\> at line 13, column 16 (byte 248) after filter { csv { separator =\> "," columns =\> ["Date","Time","Block","Name","IP","Device","[Sr.No](http://Sr.No)","Alert Message" ] } mutate { merge

Any help - appreciated.  
CS

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [January 31, 2018, 11:45am UTC](https://discuss.elastic.co/t/errors-in-while-starting-logstash/117797/2 "2018-01-31T11:45:14Z")

</div>

> [@script007](#):
>
> mutate { merge ==\> ["Date","Time]}

Looks like `Time` is missing a closing `"`.

---

<div class="post-metadata">

### Author: ![script007](https://avatars.discourse-cdn.com/v4/letter/s/3ec8ea/32.png) [@script007](https://discuss.elastic.co/u/script007)
#### Post date: [January 31, 2018, 11:50am UTC](https://discuss.elastic.co/t/errors-in-while-starting-logstash/117797/3 "2018-01-31T11:50:48Z")

</div>

Thanks Christian,  
I've added the ending ", still errors as below.  
=====[2018-01-31T11:47:13,585][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"fb\_apache", :directory=\>"/usr/share/logstash/modules/fb\_apache/configuration"}  
[2018-01-31T11:47:13,589][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"netflow", :directory=\>"/usr/share/logstash/modules/netflow/configuration"}  
[2018-01-31T11:47:13,872][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified  
[2018-01-31T11:47:14,322][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9608}  
[2018-01-31T11:47:14,406][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, =\> at line 13, column 16 (byte 248) after filter {\ncsv {\nseparator =\> ","\ncolumns =\> ["Date","Time","Block","Name","IP","Device","[Sr.No](http://Sr.No)","Alert Message" ]\n}\nmutate { merge ", :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:42:in `compile_ast'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:50:in`compile\_imperative'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:54:in `compile_graph'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:12:in`block in compile\_sources'", "org/jruby/RubyArray.java:2486:in `map'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:11:in`compile\_sources'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:107:in `compile_lir'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:49:in`initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:215:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:35:in`execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:335:in `block in converge_state'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:141:in`with\_pipelines'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:332:in `block in converge_state'", "org/jruby/RubyArray.java:1734:in`each'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:319:in `converge_state'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:166:in`block in converge\_state\_and\_update'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:141:in `with_pipelines'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:164:in`converge\_state\_and\_update'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:90:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:362:in`block in execute'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/stud-0.0.23/lib/stud/task.rb:24:in `block in initialize'"]}

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [January 31, 2018, 11:55am UTC](https://discuss.elastic.co/t/errors-in-while-starting-logstash/117797/4 "2018-01-31T11:55:35Z")

</div>

> [@script007](#):
>
> Expected one of #, =\> at line 13, column 16 (byte 248) after filter

The error message points you to the line. Looks like you also have a `==>` instead of `=>` which I did not spot before.

---

<div class="post-metadata">

### Author: ![script007](https://avatars.discourse-cdn.com/v4/letter/s/3ec8ea/32.png) [@script007](https://discuss.elastic.co/u/script007)
#### Post date: [January 31, 2018, 12:04pm UTC](https://discuss.elastic.co/t/errors-in-while-starting-logstash/117797/5 "2018-01-31T12:04:36Z")

</div>

Spot on... Christian  
Both your suggestions are 100% ..  
Appreciated your help 🙂  
Have a good day.

Regards  
CS

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 28, 2018, 12:04pm UTC](https://discuss.elastic.co/t/errors-in-while-starting-logstash/117797/6 "2018-02-28T12:04:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
