# Filebeat config file error

**URL:** <https://discuss.elastic.co/t/filebeat-config-file-error/56573>\
**Category:** Logstash\
**Created:** [July 28, 2016, 12:52am UTC](https://discuss.elastic.co/t/filebeat-config-file-error/56573 "2016-07-28T00:52:34Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![yomesky20000](https://avatars.discourse-cdn.com/v4/letter/y/ee7513/32.png) [@yomesky20000](https://discuss.elastic.co/u/yomesky20000)\
**Post date:** [July 28, 2016, 12:52am UTC](https://discuss.elastic.co/t/filebeat-config-file-error/56573/1 "2016-07-28T00:52:34Z")

</div>

I am trying to start Filebeats on a clients server to ship log to my ELK server and im getting the below error

service filebeat start

Starting filebeat: Loading config file error: YAML config parsing failed on /etc/filebeat/filebeat.yml: yaml: line 281: found unexpected ':'. Exiting.

### my config file below

### Logstash as output

278  
279 ### Logstash as output  
280 #logstash:  
281 # The Logstash hosts  
282 hosts: [[elasticsearch.local.com:5044](http://elasticsearch.local.com:5044)]  
283 bulk\_max\_size:1024  
284  
285 # Number of workers per Logstash host.  
286 #worker: 1  
287  
288 # Set gzip compression level.  
289 #compression\_level: 3  
290  
291 # Optional load balance the events between the Logstash hosts  
292 #loadbalance: true  
293  
294 # Optional index name. The default index name depends on the each beat.  
295 # For Packetbeat, the default is set to packetbeat, for Topbeat  
296 # top topbeat and for Filebeat to filebeat.  
297 #index: filebeat  
298  
299 # Optional TLS. By default is off.  
300 tls:

The system keeps complaining about Line 281 and im confused whats not right on that line, Pls anyone with a suggestion to help will be appreciated.

---

<div class="post-metadata">

**Author:** ![Joshua\_Rich](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joshua_rich/32/44953_2.png) [@Joshua\_Rich](https://discuss.elastic.co/u/Joshua_Rich)\
**Post date:** [July 28, 2016, 6:11am UTC](https://discuss.elastic.co/t/filebeat-config-file-error/56573/2 "2016-07-28T06:11:09Z")

</div>

It looks like you need to uncomment line 280 for your config to be valid.

---

<div class="post-metadata">

**Author:** ![yomesky20000](https://avatars.discourse-cdn.com/v4/letter/y/ee7513/32.png) [@yomesky20000](https://discuss.elastic.co/u/yomesky20000)\
**Post date:** [July 28, 2016, 12:09pm UTC](https://discuss.elastic.co/t/filebeat-config-file-error/56573/3 "2016-07-28T12:09:34Z")

</div>

I will try this today and hopefully it works, thanks Josh Sincere regards,  
Yomi SunmonuRHCSA, ITILv3System Engineer

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:46am UTC](https://discuss.elastic.co/t/filebeat-config-file-error/56573/4 "2017-07-06T04:46:08Z")

</div>


