# Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main **URL:** \ **Category:** Logstash\ **Created:** [November 19, 2018, 6:04pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id-main/157419 "2018-11-19T18:04:33Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![BigAlbert](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bigalbert/32/37844_2.png) [@BigAlbert](https://discuss.elastic.co/u/BigAlbert)\ **Post date:** [November 19, 2018, 6:04pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id-main/157419/1 "2018-11-19T18:04:33Z")
Hi I'm using logstash-6.5.0, following is cat /usr/local/logstash-6.5.0/config/logstash.conf input { file { path =\> "/usr/src/myprod/mylog.startup-1.0.0.log" type =\> "logs" start\_position =\> "beginning" } } filter { grok{ match =\> { "message" =\> "%{COMBINEDAPACHELOG}" } } mutate{ convert =\> { "bytes" =\> "integer" } } date { match =\> ["timestamp", "dd/MMM/YYYY:HH:mm:ss Z"] locale =\> en remove\_field =\> "timestamp" } geoip { source =\> "clientip" } useragent { source =\> "agent" target =\> "useragent" } } output { stdout { codec =\> dots } ``` output { elasticsearch { hosts => ["172.18.0.5:9200"] index => "myprod" } ``` } executing bin/logstash -f config/logstash.conf (from /usr/local/logstash-6.5.0), will cause : Sending Logstash logs to /usr/local/logstash-6.5.0/logs which is now configured via log4j2.properties [2018-11-19T17:55:13,319][INFO][logstash.setting.writabledirectory] Creating directory {:setting=\>"path.queue", :path=\>"/usr/local/logstash-6.5.0/data/queue"} [2018-11-19T17:55:13,326][INFO][logstash.setting.writabledirectory] Creating directory {:setting=\>"path.dead\_letter\_queue", :path=\>"/usr/local/logstash-6.5.0/data/dead\_letter\_queue"} [2018-11-19T17:55:13,610][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified [2018-11-19T17:55:13,619][INFO][logstash.runner] Starting Logstash {"logstash.version"=\>"6.5.0"} [2018-11-19T17:55:13,642][INFO][logstash.agent] No persistent UUID file found. Generating new UUID {:uuid=\>"77e0fd7d-446e-4dd1-b2cd-6bb2264cf34f", :path=\>"/usr/local/logstash-6.5.0/data/uuid"} [2018-11-19T17:55:14,702][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, =\> at line 43, column 16 (byte 527) after output\n{\n\tstdout {\n\t\tcodec =\> dots\n\t}\n\n\toutput {\n\telasticsearch ", :backtrace=\>["/usr/local/logstash-6.5.0/logstash-core/lib/logstash/compiler.rb:41:in `compile_imperative'", "/usr/local/logstash-6.5.0/logstash-core/lib/logstash/compiler.rb:49:in`compile\_graph'", "/usr/local/logstash-6.5.0/logstash-core/lib/logstash/compiler.rb:11:in `block in compile_sources'", "org/jruby/RubyArray.java:2486:in`map'", "/usr/local/logstash-6.5.0/logstash-core/lib/logstash/compiler.rb:10:in `compile_sources'", "org/logstash/execution/AbstractPipelineExt.java:149:in`initialize'", "/usr/local/logstash-6.5.0/logstash-core/lib/logstash/pipeline.rb:22:in `initialize'", "/usr/local/logstash-6.5.0/logstash-core/lib/logstash/pipeline.rb:90:in`initialize'", "/usr/local/logstash-6.5.0/logstash-core/lib/logstash/pipeline\_action/create.rb:42:in `block in execute'", "/usr/local/logstash-6.5.0/logstash-core/lib/logstash/agent.rb:92:in`block in exclusive'", "org/jruby/ext/thread/Mutex.java:148:in `synchronize'", "/usr/local/logstash-6.5.0/logstash-core/lib/logstash/agent.rb:92:in`exclusive'", "/usr/local/logstash-6.5.0/logstash-core/lib/logstash/pipeline\_action/create.rb:38:in `execute'", "/usr/local/logstash-6.5.0/logstash-core/lib/logstash/agent.rb:317:in`block in converge\_state'"]} [2018-11-19T17:55:14,942][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600} Am I missing something here ?? THX ---
**Author:** ![wwalker](https://avatars.discourse-cdn.com/v4/letter/w/43a26b/32.png) [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Post date:** [November 19, 2018, 10:12pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id-main/157419/2 "2018-11-19T22:12:35Z")
Hard to tell specifically where the error is pointing because your copy/pasted config isn't the same as what you are using. It's saying there's a problem on line 43 at character 16, but if I copy/paste your config into notepad++, it comes out to 39 lines. However, if I had to guess, it's a problem with your output: ``` output { stdout { codec => dots } output { elasticsearch { hosts => ["172.18.0.5:9200"] index => "myprod" } } ``` You're stating `output` nested inside another `output`. What you'd want to do is just list the output plugins one after the other like you do with your filter. ``` output { stdout { codec => dots } elasticsearch { hosts => ["172.18.0.5:9200"] index => "myprod" } } ``` ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [November 19, 2018, 10:30pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id-main/157419/3 "2018-11-19T22:30:07Z")
You have an output block within an output block, probably due to a missing curly brace. ---
**Author:** ![BigAlbert](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bigalbert/32/37844_2.png) [@BigAlbert](https://discuss.elastic.co/u/BigAlbert)\ **Post date:** [November 20, 2018, 12:01pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id-main/157419/4 "2018-11-20T12:01:21Z")
You werre right - Thx!! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 18, 2018, 12:01pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline-id-main/157419/5 "2018-12-18T12:01:26Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.