Index pattern is not created for Centralized pipeline

Elastic Stack Logstash
1

Hi Team,

I have created centralized pipeline with parent and child pipelines ,but i'm unable to create index pattern.
I have written parent and child pipelines in below format

parent:

config/pipelines.yml

  • pipeline.id: beats7
    config.string: |
    input{
    beats {
    port => 8565
    }
    }
    output{

    if "UMS" in [tags] {
    pipeline { send_to => beats1}
    }
    }

Child:

  • pipeline.id: beats3
    config.string: |
    input {
    pipeline { address => beats3 }
    }
    filter{
    if "UMS" in [tags]
    {
    dissect {
    mapping => {
    message => "%{logLevel}|%{jvmInfo}| %{datetime} | %
    {errorMessage}" }
    }
    }
    }

output{

if "UMS" in [tags] {
elasticsearch {
hosts => ["dla-w01abc01"]
manage_template => false
#ssl => true
#ssl_certificate_verification => true
user => "#####"
password => "########"
index => "ums-%{+YYYY.MM.dd}"
}
stdout {
codec => rubydebug
}
}
}

i got error in logs as
[2018-12-11T09:22:57,786][ERROR][logstash.agent ] Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:beats3, :exception=>"LogStash::ConfigurationError", :message=>"Expected one of #, input, filter, output at line 2, column 1 (byte 25) after # config/pipelines.yml\r\n", :backtrace=>["/opt/elk/v630/logstash-6.3.0/logstash-core/lib/logstash/compiler.rb:42:in compile_imperative'", "/opt/elk/v630/logstash-6.3.0/logstash-core/lib/logstash/compiler.rb:50:incompile_graph'", "/opt/elk/v630/logstash-6.3.0/logstash-core/lib/logstash/compiler.rb:12:in block in compile_sources'", "org/jruby/RubyArray.java:2486:inmap'", "/opt/elk/v630/logstash-6.3.0/logstash-core/lib/logstash/compiler.rb:11:in compile_sources'", "/opt/elk/v630/logstash-6.3.0/logstash-core/lib/logstash/pipeline.rb:49:ininitialize'", "/opt/elk/v630/logstash-6.3.0/logstash-core/lib/logstash/pipeline.rb:167:in initialize'", "/opt/elk/v630/logstash-6.3.0/logstash-core/lib/logstash/pipeline_action/create.rb:40:inexecute'", "/opt/elk/v630/logstash-6.3.0/logstash-core/lib/logstash/agent.rb:305:in block in converge_state'"]} [2018-12-11T09:22:57,786][ERROR][logstash.agent ] Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:beats7, :exception=>"LogStash::ConfigurationError", :message=>"Expected one of #, input, filter, output at line 1, column 1 (byte 1) after ", :backtrace=>["/opt/elk/v630/logstash-6.3.0/logstash-core/lib/logstash/compiler.rb:42:incompile_imperative'", "/opt/elk/v630/logstash-6.3.0/logstash-core/lib/logstash/compiler.rb:50:in compile_graph'", "/opt/elk/v630/logstash-6.3.0/logstash-core/lib/logstash/compiler.rb:12:inblock in compile_sources'", "org/jruby/RubyArray.java:2486:in map'", "/opt/elk/v630/logstash-6.3.0/logstash-core/lib/logstash/compiler.rb:11:incompile_sources'", "/opt/elk/v630/logstash-6.3.0/logstash-core/lib/logstash/pipeline.rb:49:in initialize'", "/opt/elk/v630/logstash-6.3.0/logstash-core/lib/logstash/pipeline.rb:167:ininitialize'", "/opt/elk/v630/logstash-6.3.0/logstash-core/lib/logstash/pipeline_action/create.rb:40:in execute'", "/opt/elk/v630/logstash-6.3.0/logstash-core/lib/logstash/agent.rb:305:inblock in converge_state'"]}

Kindly let me know if there are any changes in configurations.

Thanks in advance.

Regards,
D. Susmitha

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.