# Input json file to logstash issues

**URL:** <https://discuss.elastic.co/t/input-json-file-to-logstash-issues/86859>\
**Category:** Logstash\
**Created:** [May 23, 2017, 7:30pm UTC](https://discuss.elastic.co/t/input-json-file-to-logstash-issues/86859 "2017-05-23T19:30:09Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tal\_Bar\_Or](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tal_bar_or/32/5127_2.png) [@Tal\_Bar\_Or](https://discuss.elastic.co/u/Tal_Bar_Or)\
**Post date:** [May 23, 2017, 7:30pm UTC](https://discuss.elastic.co/t/input-json-file-to-logstash-issues/86859/1 "2017-05-23T19:30:09Z")

</div>

Hi,

I am trying to input an tshark json output and output it "ruby\_debug" for first stage facing issues  
Tried several ways inout i searched but keep getting errors showed below , any i idea hot input correctly such file format?  
please advice  
Thanks

=====console error============  
C:\ELK\logstash-5.4.0\bin\>logstash --verbose -f loginput.conf  
JAVA\_OPTS was set to [-Xmx1g -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -XX:+CMSParallelRemarkEnabled -XX:SurvivorRatio=8 -XX:MaxTenuringThreshold=1 -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath="C:\ELK\logstash-5.4.0/heapdump.hprof"]. Logstash will trust these options, and not set any defaults that it might usually set  
ERROR StatusLogger No log4j2 configuration file found. Using default configuration: logging only errors to the console.  
Could not find log4j2 configuration at path /ELK/logstash-5.4.0/config/log4j2.properties. Using default config which logs to console  
22:12:33.968 [LogStash::Runner] ERROR logstash.plugins.registry - Problems loading a plugin with {:type=\>"codec", :name=\>"ruby\_debug", :path=\>"logstash/codecs/ruby\_debug", :error\_message=\>"NameError", :error\_class=\>NameError, :error\_backtrace=\>["C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/plugins/registry.rb:221:in `namespace_lookup'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/plugins/registry.rb:157:in`legacy\_lookup'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/plugins/registry.rb:133:in `lookup'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/plugins/registry.rb:175:in`lookup\_pipeline\_plugin'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/plugin.rb:139:in `lookup'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/config/mixin.rb:448:in`validate\_value'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/config/mixin.rb:369:in `process_parameter_value'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/config/mixin.rb:388:in`validate\_check\_parameter\_values'", "org/jruby/RubyArray.java:1613:in `each'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/config/mixin.rb:382:in`validate\_check\_parameter\_values'", "org/jruby/RubyHash.java:1342:in `each'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/config/mixin.rb:381:in`validate\_check\_parameter\_values'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/config/mixin.rb:271:in `validate'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/config/mixin.rb:129:in`config\_init'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/outputs/base.rb:63:in `initialize'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/output_delegator_strategies/single.rb:3:in`initialize'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/output\_delegator.rb:23:in `initialize'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/pipeline.rb:94:in`plugin'", "(eval):12:in `initialize'", "org/jruby/RubyKernel.java:1079:in`eval'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/pipeline.rb:63:in `initialize'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/pipeline.rb:145:in`initialize'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/agent.rb:286:in `create_pipeline'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/agent.rb:95:in`register\_pipeline'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/runner.rb:274:in `execute'", "C:/ELK/logstash-5.4.0/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:67:in`run'", "C:/ELK/logstash-5.4.0/logstash-core/lib/logstash/runner.rb:185:in `run'", "C:/ELK/logstash-5.4.0/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:132:in`run'", "C:\ELK\logstash-5.4.0\lib\bootstrap\environment.rb:71:in `(root)'"]}  
22:12:34.372 [LogStash::Runner] ERROR logstash.agent - Cannot create pipeline {:reason=\>"Couldn't find any codec plugin named 'ruby\_debug'. Are you sure this is correct? Trying to load the ruby\_debug codec plugin resulted in this error: Problems loading the requested plugin named ruby\_debug of type codec. Error: NameError NameError"}

====the input config file========  
input{  
file{  
codec =\> json\_lines  
sincedb\_path =\> "dev/null"  
path =\> "file.json"  
start\_position =\> "beginning"  
}  
}  
output{  
stdout{codec =\> ruby\_debug}  
}  
======the jsonfile=========  
[  
{  
"\_index": "packets-2017-05-22",  
"\_type": "pcap\_file",  
"\_score": null,  
"\_source": {  
"layers": {  
"frame.number": ["26"],  
"frame.time\_relative": ["1.560480000"],  
"ip.src": ["172.23.136.73"],  
"ip.dst": ["172.23.254.88"],  
"tcp.flags.syn": ["1"],  
"tcp.flags.ack": ["0"]  
}  
}  
}

,  
{  
"\_index": "packets-2017-05-22",  
"\_type": "pcap\_file",  
"\_score": null,  
"\_source": {  
"layers": {  
"frame.number": ["27"],  
"frame.time\_relative": ["1.560558000"],  
"ip.src": ["10.10.1.1"],  
"ip.dst": ["172.23.254.88"],  
"tcp.flags.syn": ["1"],  
"tcp.flags.ack": ["0"]  
}  
}  
}

,  
{  
"\_index": "packets-2017-05-22",  
"\_type": "pcap\_file",  
"\_score": null,  
"\_source": {  
"layers": {  
"frame.number": ["28"],  
"frame.time\_relative": ["1.560616000"],  
"ip.src": ["172.23.136.73"],  
"ip.dst": ["172.23.254.88"],  
"tcp.flags.syn": ["1"],  
"tcp.flags.ack": ["0"]  
}  
}  
}

,  
{  
"\_index": "packets-2017-05-22",  
"\_type": "pcap\_file",  
"\_score": null,  
"\_source": {  
"layers": {  
"frame.number": ["29"],  
"frame.time\_relative": ["1.560707000"],  
"ip.src": ["172.23.254.88"],  
"ip.dst": ["172.23.136.73"],  
"tcp.flags.syn": ["1"],  
"tcp.flags.ack": ["1"],  
"tcp.analysis.acks\_frame": ["26"],  
"tcp.analysis.ack\_rtt": ["0.000227000"]  
}  
}  
}

,  
{  
"\_index": "packets-2017-05-22",  
"\_type": "pcap\_file",  
"\_score": null,  
"\_source": {  
"layers": {  
"frame.number": ["30"],  
"frame.time\_relative": ["1.560713000"],  
"ip.src": ["172.23.136.73"],  
"ip.dst": ["172.23.254.88"],  
"tcp.flags.syn": ["0"],  
"tcp.flags.ack": ["1"],  
"tcp.analysis.acks\_frame": ["29"],  
"tcp.analysis.ack\_rtt": ["0.000006000"]  
}  
}  
}  
]

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 25, 2017, 9:56am UTC](https://discuss.elastic.co/t/input-json-file-to-logstash-issues/86859/2 "2017-05-25T09:56:16Z")

</div>

> [@Tal\_Bar\_Or](#):
>
> Couldn't find any codec plugin named 'ruby\_debug'

You want `rubydebug` - [Rubydebug codec plugin | Logstash Reference [8.11] | Elastic](https://www.elastic.co/guide/en/logstash/current/plugins-codecs-rubydebug.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 22, 2017, 9:56am UTC](https://discuss.elastic.co/t/input-json-file-to-logstash-issues/86859/3 "2017-06-22T09:56:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
