You are trully a life saver 
the spaces was indeed the issue, but now for some reason i get this error:
c:\Install\6.2.2\logstash-6.2.2\bin>logstash -f logstashPipeLine_SolarWinds.conf
Sending Logstash's logs to c:/Install/6.2.2/logstash-6.2.2/logs which is now configured via log4j2.properties
[2018-03-18T10:33:57,336][INFO ][logstash.modules.scaffold] Initializing module {:module_name=>"fb_apache", :directory=>"c:/Install/6.2.2/logstash-6.2.2/modules/fb_apache/configuration"}
[2018-03-18T10:33:57,352][INFO ][logstash.modules.scaffold] Initializing module {:module_name=>"netflow", :directory=>"c:/Install/6.2.2/logstash-6.2.2/modules/netflow/configuration"}
[2018-03-18T10:33:57,633][WARN ][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
[2018-03-18T10:33:58,368][INFO ][logstash.runner ] Starting Logstash {"logstash.version"=>"6.2.2"}
[2018-03-18T10:33:59,243][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
[2018-03-18T10:34:06,743][INFO ][logstash.pipeline ] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>4, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50}
[2018-03-18T10:34:07,322][INFO ][logstash.outputs.elasticsearch] Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[http://win-ej0hvlfu246:9200/]}}
[2018-03-18T10:34:07,337][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://win-ej0hvlfu246:9200/, :path=>"/"}
[2018-03-18T10:34:07,555][WARN ][logstash.outputs.elasticsearch] Restored connection to ES instance {:url=>"http://win-ej0hvlfu246:9200/"}
[2018-03-18T10:34:07,618][INFO ][logstash.outputs.elasticsearch] ES Output version determined {:es_version=>nil}
[2018-03-18T10:34:07,634][WARN ][logstash.outputs.elasticsearch] Detected a 6.x and above cluster: the `type` event field won't be used to determine the document _type {:es_version=>6}
[2018-03-18T10:34:07,650][INFO ][logstash.outputs.elasticsearch] Using mapping template from {:path=>nil}
[2018-03-18T10:34:07,681][INFO ][logstash.outputs.elasticsearch] Attempting to install template {:manage_template=>{"template"=>"logstash-*", "version"=>60001, "settings"=>{"index.refresh_interval"=>"5s"}, "mappings"=>{"_default_"=>{"dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "
match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"*", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, "fields"=>{"keyword"=>{"type"=>"keyword", "ignore_above"=>256}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date"
}, "@version"=>{"type"=>"keyword"}, "geoip"=>{"dynamic"=>true, "properties"=>{"ip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}}}
[2018-03-18T10:34:07,727][INFO ][logstash.outputs.elasticsearch] New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["http://win-ej0hvlfu246:9200/"]}
[2018-03-18T10:34:07,774][INFO ][logstash.inputs.http_poller] Registering http_poller Input {:type=>nil, :schedule=>{"cron"=>"* * * * * UTC"}, :timeout=>nil}
[2018-03-18T10:34:07,837][INFO ][logstash.pipeline ] Pipeline started succesfully {:pipeline_id=>"main", :thread=>"#<Thread:0x27973c7f sleep>"}
[2018-03-18T10:34:07,962][INFO ][logstash.agent ] Pipelines running {:count=>1, :pipelines=>["main"]}
{
"tags" => [
[0] "_http_request_failure"
],
"http_request_failure" => {
"name" => "solarwinds",
"backtrace" => nil,
"runtime_seconds" => 0.234,
"error" => "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target",
"request" => {
"cacert" => "C:\\cert\\downloaded_cert.pem",
"method" => "get",
"auth" => {
"pass" => "Zxasqw12",
"user" => "admin",
"eager" => true
},
"url" => "https://solarwinds-orion:17778/SolarWinds/InformationService/v3/Json/Query?query=SELECT%20N.NodeID,N.IPAddress,N.Caption,N.NodeDescription,N.Description,N.DNS,N.SysName,N.Vendor,N.Location,N.IOSVersion,N.MachineType,N.NodeName,I.InterfaceID,I.ObjectSubType,I.Name,I.Index,I.
TypeName,I.TypeDescription,I.PhysicalAddress,I.Caption%20as%20Caption2,I.FullName,I.Alias,I.InterfaceCaption,I.MAC,I.InterfaceIndex%20FROM%20Orion.Nodes%20as%20N%20LEFT%20JOIN%20Orion.NPM.Interfaces%20AS%20I%20ON%20I.NodeID%20=%20N.NodeID",
"headers" => {
"Accept" => "application/json"
}
}
},
"http_poller_metadata" => {
"name" => "solarwinds",
"runtime_seconds" => nil,
"host" => "WIN-EJ0HVLFU246",
"request" => {
"cacert" => "C:\\cert\\downloaded_cert.pem",
"method" => "get",
"auth" => {
"pass" => "Zxasqw12",
"user" => "admin",
"eager" => true
},
"url" => "https://solarwinds-orion:17778/SolarWinds/InformationService/v3/Json/Query?query=SELECT%20N.NodeID,N.IPAddress,N.Caption,N.NodeDescription,N.Description,N.DNS,N.SysName,N.Vendor,N.Location,N.IOSVersion,N.MachineType,N.NodeName,I.InterfaceID,I.ObjectSubType,I.Name,I.Index,I.
TypeName,I.TypeDescription,I.PhysicalAddress,I.Caption%20as%20Caption2,I.FullName,I.Alias,I.InterfaceCaption,I.MAC,I.InterfaceIndex%20FROM%20Orion.Nodes%20as%20N%20LEFT%20JOIN%20Orion.NPM.Interfaces%20AS%20I%20ON%20I.NodeID%20=%20N.NodeID",
"headers" => {
"Accept" => "application/json"
}
}
},
"@version" => "1",
"@timestamp" => 2018-03-18T08:35:00.540Z
}
i tried changing the certificate directory to something simpler like c:\cert* , and also tried to open the cmd as administrator in case this was a permission issue.
nothing worked,
what can be the problem ?
also, is there a way to ignore the certificate, just as i can do on a browser ?
