# Failed to execute action - logstash

**URL:** https://discuss.elastic.co/t/failed-to-execute-action-logstash/160228
**Category:** Logstash
**Created:** [December 10, 2018, 5:06pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-logstash/160228 "2018-12-10T17:06:01Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![vnallamothu](https://avatars.discourse-cdn.com/v4/letter/v/35a633/32.png) [@vnallamothu](https://discuss.elastic.co/u/vnallamothu)
#### Post date: [December 10, 2018, 5:06pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-logstash/160228/1 "2018-12-10T17:06:01Z")

</div>

Hi,

I'm trying to send logs from AWS Kinesis firehose to elasticsearch through logstash. My ".conf" file look like following:

```
input {
        kinesis {
                kinesis_stream_name => "GuardDutyFindings-Delivery"
                region => "us-east-1"
                profile => "default"
                codec => json
         }
}
output {
        elasticsearch {
                hosts => "X.X.X.X:9200"
                index => "sample-guardduty-index"
                             }
           }

```

But, when I run " **bin/logstash -e /etc/logstash/conf.d/test.conf --path.settings /etc/logstash**" Following error is thrown:

> [\> 2018-12-10T16:30:17,624][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, input, filter, output at line 3, column 1 (byte 76) after ", :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:42:in `compile_imperative'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:50:in `compile\_graph'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:12:in `block in compile_sources'", "org/jruby/RubyArray.java:2486:in `map'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:11:in `compile_sources'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:51:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:169:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:40:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:315:in `block in converge_state'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:141:in `with\_pipelines'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:312:in `block in converge_state'", "org/jruby/RubyArray.java:1734:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:299:in `converge_state'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:166:in `block in converge\_state\_and\_update'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:141:in `with_pipelines'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:164:in `converge\_state\_and\_update'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:90:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:348:in `block in execute'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/stud-0.0.23/lib/stud/task.rb:24:in `block in initialize'"]}

when I run when I run " **bin/logstash -f /etc/logstash/conf.d/test.conf --path.settings /etc/logstash**" , it is throwing following error:

```
SEVERE: Unable to initialize after 20 attempts. Shutting down.
java.lang.RuntimeException: java.lang.IllegalArgumentException: profile file cannot be null

```

Can you let me know what is my mistake?

---

<div class="post-metadata">

### Author: ![vnallamothu](https://avatars.discourse-cdn.com/v4/letter/v/35a633/32.png) [@vnallamothu](https://discuss.elastic.co/u/vnallamothu)
#### Post date: [December 11, 2018, 3:48pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-logstash/160228/2 "2018-12-11T15:48:40Z")

</div>

My bad. I have to use "-f" parameter instead of "-e" when I assign path to ".conf" file.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 8, 2019, 3:48pm UTC](https://discuss.elastic.co/t/failed-to-execute-action-logstash/160228/3 "2019-01-08T15:48:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
