# Failed to create monitoring event Map keys: \[:pipelines, :reloads\]

**URL:** https://discuss.elastic.co/t/failed-to-create-monitoring-event-map-keys-pipelines-reloads/147331
**Category:** Logstash
**Created:** [September 5, 2018, 8:05am UTC](https://discuss.elastic.co/t/failed-to-create-monitoring-event-map-keys-pipelines-reloads/147331 "2018-09-05T08:05:10Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Girish\_N](https://avatars.discourse-cdn.com/v4/letter/g/db5fbb/32.png) [@Girish\_N](https://discuss.elastic.co/u/Girish_N)
#### Post date: [September 5, 2018, 8:05am UTC](https://discuss.elastic.co/t/failed-to-create-monitoring-event-map-keys-pipelines-reloads/147331/1 "2018-09-05T08:05:11Z")

</div>

Hi

After installing x-pack, i have the followinf error in my logstash

`[2018-09-05T09:14:40,717][ERROR][logstash.inputs.metrics] Failed to create monitoring event {:message=>"For path: events. Map keys: [:pipelines, :reloads]", :error=>"LogStash::Instrument::MetricStore::MetricNotFound"}`

Logstash.yml  
xpack.monitoring.enabled: true  
xpack.monitoring.elasticsearch.username: logstash\_system  
xpack.monitoring.elasticsearch.password: elastic  
xpack.monitoring.elasticsearch.url: ["[http://localhost:9200](http://localhost:9200)"]

```
xpack.management.enabled: true
xpack.management.pipeline.id: ["main","syslog"]
xpack.management.elasticsearch.username: elastic
xpack.management.elasticsearch.password: elastic
xpack.management.elasticsearch.url: ["http://localhost:9200"]

```

pipelines.yml  
- pipeline.id: main  
path.config: "/etc/logstash/conf.d/\*.conf"

elasticsearch.yml  
`xpack.security.enabled: true`

logstash configuration - syslog.conf -- /etc/logstash/conf.d/syslog.conf

```
input {
   syslog{
       port => "514"
       host => "XXX.XX.XXX.XX"
    }
}

filter
{
grok {
      match => { "message" =>"%{SYSLOGTIMESTAMP:syslog_timestamp} %{SYSLOGHOST:syslog_hostname} %{DATA:syslog_program}(?:\[%{POSINT:syslog_pid}\])?: %{GREEDYDATA:syslog_message}" }
      pattern_definitions => { "GREEDYMULTILINE" => "(.|\n)*" }
      remove_field => "message"
   }
   date {
      match => ["syslog_timestamp", "MMM d HH:mm:ss", "MMM dd HH:mm:ss"]
   }
}

output {
    elasticsearch
        { hosts => ["localhost:9200"]},
         user => elastic
         password => elastic

        stdout { codec => rubydebug }
}

```

I have tried with all other similar post, still no luck

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 3, 2018, 8:05am UTC](https://discuss.elastic.co/t/failed-to-create-monitoring-event-map-keys-pipelines-reloads/147331/2 "2018-10-03T08:05:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.