Got error in logstash. help me!

hi guys . i got some error code in AMI
when i excute logstash config file for indexing

these is error codes=>
Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:main, :exception=>"LogStash::ConfigurationError", :message=>"Expected one of #, input, filter, output at line 214, column 1 (byte 8248) after ", :backtrace=>["/logstash-7.1.1/logstash-core/lib/logstash/compiler.rb:41:in compile_imperative'", "/logstash-7.1.1/logstash-core/lib/logstash/compiler.rb:49:in compile_graph'", "/logstash-7.1.1/logstash-core/lib/logstash/compiler.rb:11:in block in compile_sources'", "org/jruby/RubyArray.java:2577:in map'", "/logstash-7.1.1/logstash-core/lib/logstash/compiler.rb:10:in compile_sources'", "org/logstash/execution/AbstractPipelineExt.java:151:in initialize'", "org/logstash/execution/JavaBasePipelineExt.java:47:in initialize'", "/logstash-7.1.1/logstash-core/lib/logstash/java_pipeline.rb:23:in initialize'", "/logstash-7.1.1/logstash-core/lib/logstash/pipeline_action/create.rb:36:in execute'", "/logstash-7.1.1/logstash-core/lib/logstash/agent.rb:325:in block in converge_state'"]}

here is my config mates

from under

jdbc_fetch_size => 1000
use_column_value => true
tracking_column => "updat"
tracking_column_type => "timestamp"
#last_run_metadata_path => "/logstash/.logstash_jdbc_last_run"
record_last_run => true
clean_run => true

}
}
filter {
aggregate{
task_id => "%{spoid}_%{bid}"
code =>"
map['spoid'] = event.get('spoid')
map['bid'] = event.get('bid')
map['free'] = event.get('free')
map['kind'] = event.get('kind')
map['sponam'] = event.get('sponam')
map['planam'] = event.get('planam')
map['addcod'] = event.get('addcod')
map['zipadmsi'] = event.get('zipadmsi')
map['zipadmgu'] = event.get('zipadmgu')
map['zipcod'] = event.get('zipcod')
map['add1'] = event.get('add1')
map['add2'] = event.get('add2')
map['pladesc'] = event.get('pladesc')
map['lon'] = event.get('lon')
map['lat'] = event.get('lat')
map['stacolor'] = event.get('stacolor')
map['cnt'] = event.get('cnt')
map['ord'] = event.get('ord')
map['id'] = event.get('id')
map['text'] = event.get('text')
map['spotman'] ||=
map['spotman'] << {'dcchacod' => event.get('dcchacod')}
"
timeout_tags => ["aggregate"]
push_previous_map_as_event => true
timeout => 3
timeout_code => "
elapsed_time = Time.now - event.timestamp.time
event.tag('last') if elapsed_time >= 3
"
}
}
date{
match => ["setdt","yyyyMMdd'T'HHmmss"]
timezone => "Asia/Seoul"
target => "setdt"
}
mutate {

    add_field => {"msg_id" => "%{bid}%{spoid}"}

}

output {
elasticsearch {
hosts => ["search-everon-jkgsx53bmgr3lhvcwpgylxnd7e.ap-northeast-2.es.amazonaws.com:443"]
ssl => true
index => "everon_spot"
ilm_enabled => false
document_id => "%{msg_id}"

    }
            stdout{codec => json}

}

plze help me!!!

Can you post just your entire conf and use the code block so it formats it correctly?

The issues says it's at line 214, column 1 but it hard to tell since it looks like you didn't put your entire conf in here. There is no input block at the start.

Wrap your code in ``` so it shows like the below and is easier to read.

input {
   jdbc { ...

im so sorry for reply to late

and appreciate your help @aaron-nimocks

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.