# Installation document for ELK 8.7 **URL:** \ **Category:** Logstash\ **Created:** [July 5, 2023, 8:13am UTC](https://discuss.elastic.co/t/installation-document-for-elk-8-7/337635 "2023-07-05T08:13:47Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![SivaPrasadELK](https://avatars.discourse-cdn.com/v4/letter/s/2bfe46/32.png) [@SivaPrasadELK](https://discuss.elastic.co/u/SivaPrasadELK)\ **Post date:** [July 5, 2023, 8:13am UTC](https://discuss.elastic.co/t/installation-document-for-elk-8-7/337635/1 "2023-07-05T08:13:47Z")
While trying to install the ELK 8.7 and its components such as file beat logstash kibana and Elasticsearch and trying to setup the ELK as below Filebeat =====\> Logstash ======\> elastic =======\>kibana keeping this workflow but while trying to starting logstash getting errors as below please help me to fix the below errors 2023-07-04T21:50:36,662][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600, :ssl\_enabled=\>false} [2023-07-04T21:50:36,700][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of [A-Za-z0-9\_-], [\t\r\n], "#", "=\>" at line 6, column 15 (byte 75) after input\n{\nfile {\npath =\> "/logs/NETSRV91/\*.log"\ntype =\>"logs"\nstart\_position", :backtrace=\>["/app/ELK\_Binary/logstash-8.7.1/logstash-core/lib/logstash/compiler.rb:32:in `compile_imperative'", "org/logstash/execution/AbstractPipelineExt.java:239:in `initialize'", "org/logstash/execution/AbstractPipelineExt.java:173:in `initialize'", "/app/ELK_Binary/logstash-8.7.1/logstash-core/lib/logstash/java_pipeline.rb:48:in `initialize'", "org/jruby/RubyClass.java:911:in `new'", "/app/ELK_Binary/logstash-8.7.1/logstash-core/lib/logstash/pipeline_action/create.rb:50:in `execute'", "/app/ELK\_Binary/logstash-8.7.1/logstash-core/lib/logstash/agent.rb:386:in `block in converge\_state'"]} [2023-07-04T21:50:36,713][INFO][logstash.runner] Logstash shut down. [2023-07-04T21:50:36,715][FATAL][org.logstash.Logstash] Logstash stopped processing because of an error: (SystemExit) exit org.jruby.exceptions.SystemExit: (SystemExit) exit at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:790) ~[jruby.jar:?] at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:753) ~[jruby.jar:?] at app.ELK\_Binary.logstash\_minus\_8\_dot\_7\_dot\_1.lib.bootstrap.environment.(/app/ELK\_Binary/logstash-8.7.1/lib/bootstrap/environment.rb:91) ~[?:? ``` cktrace=>["/app/ELK_Binary/logstash-8.7.1/logstash-core/lib/logstash/compiler.rb:32:in `compile_imperative'", "org/logstash/execution/AbstractPipelineExt.java:239:in `initialize'", "org/logstash/execution/AbstractPipelineExt.java:173:in `initialize'", "/app/ELK_Binary/logstash-8.7.1/logstash-core/lib/logstash/java_pipeline.rb:48:in `initialize'", "org/jruby/RubyClass.java:911:in `new'", "/app/ELK_Binary/logstash-8.7.1/logstash-core/lib/logstash/pipeline_action/create.rb:50:in `execute'", "/app/ELK_Binary/logstash-8.7.1/logstash-core/lib/logstash/agent.rb:386:in `block in converge_state'"]} ``` [2023-07-04T23:15:57,440][INFO][logstash.runner] Logstash shut down. [2023-07-04T23:15:57,443][FATAL][org.logstash.Logstash] Logstash stopped processing because of an error: (SystemExit) exit org.jruby.exceptions.SystemExit: (SystemExit) exit at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:790) ~[jruby.jar:?] at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:753) ~[jruby.jar:?] at app.ELK\_Binary.logstash\_minus\_8\_dot\_7\_dot\_1.lib.bootstrap.environment.(/app/ELK\_Binary/logstash-8.7.1/lib/bootstrap/environment.rb:91) ~[?:?] Using bundled JDK: /app/ELK\_Binary/logstash-8.7.1/jdk Sending Logstash logs to /app/ELK\_Binary/logstash-8.7.1/logs which is now configured via log4j2.properties [2023-07-04T23:19:05,182][INFO][logstash.runner] Log4j configuration path used is: /app/ELK\_Binary/logstash-8.7.1/config/log4j2.properties [2023-07-04T23:19:05,186][INFO][logstash.runner] Starting Logstash {"logstash.version"=\>"8.7.1", "jruby.version"=\>"jruby 9.3.10.0 (2.6.8) 2023-02-01 107b2e6697 OpenJDK 64-Bit Server VM 17.0.7+7 on 17.0.7+7 +indy +jit [x86\_64-linux]"} [2023-07-04T23:19:05,187][INFO][logstash.runner] JVM bootstrap flags: [-Xms1g, -Xmx1g, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djruby.compile.invokedynamic=true, -XX:+HeapDumpOnOutOfMemoryError, -Djava.security.egd=file:/dev/urandom, -Dlog4j2.isThreadContextMapInheritable=true, -Djruby.regexp.interruptible=true, -Djdk.io.File.enableADS=true, --add-exports=jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED, --add-exports=jdk.compiler/com.sun.tools.javac.file=ALL-UNNAMED, --add-exports=jdk.compiler/com.sun.tools.javac.parser=ALL-UNNAMED, --add-exports=jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED, --add-exports=jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED, --add-opens=java.base/java.security=ALL-UNNAMED, --add-opens=java.base/java.io=ALL-UNNAMED, --add-opens=java.base/java.nio.channels=ALL-UNNAMED, --add-opens=java.base/sun.nio.ch=ALL-UNNAMED, --add-opens=java.management/sun.management=ALL-UNNAMED] [2023-07-04T23:19:05,324][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified [2023-07-04T23:19:05,788][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of [\t\r\n], "#", "input", "filter", "output" at line 9, column 1 (byte 93) after ", :backtrace=\>["/app/ELK\_Binary/logstash-8.7.1/logstash-core/lib/logstash/compiler.rb:32:in `compile_imperative'", "org/logstash/execution/AbstractPipelineExt.java:239:in `initialize'", "org/logstash/execution/AbstractPipelineExt.java:173:in `initialize'", "/app/ELK_Binary/logstash-8.7.1/logstash-core/lib/logstash/java_pipeline.rb:48:in `initialize'", "org/jruby/RubyClass.java:911:in `new'", "/app/ELK_Binary/logstash-8.7.1/logstash-core/lib/logstash/pipeline_action/create.rb:50:in `execute'", "/app/ELK\_Binary/logstash-8.7.1/logstash-core/lib/logstash/agent.rb:386:in `block in converge\_state'"]} [2023-07-04T23:19:05,821][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600, :ssl\_enabled=\>false} [2023-07-04T23:19:05,826][INFO][logstash.runner] Logstash shut down. [2023-07-04T23:19:05,829][FATAL][org.logstash.Logstash] Logstash stopped processing because of an error: (SystemExit) exit org.jruby.exceptions.SystemExit: (SystemExit) exit at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:790) ~[jruby.jar:?] at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:753) ~[jruby.jar:?] at app.ELK\_Binary.logstash\_minus\_8\_dot\_7\_dot\_1.lib.bootstrap.environment.(/app/ELK\_Binary/logstash-8.7.1/lib/bootstrap/environment.rb:91) ~[?:?] Appreciate your timely response to fix the issue or any pointers to set above configuration on stand alone server is highly appreciated. Regards, Siva ---
**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\ **Post date:** [July 5, 2023, 1:59pm UTC](https://discuss.elastic.co/t/installation-document-for-elk-8-7/337635/2 "2023-07-05T13:59:40Z")
> [@SivaPrasadELK](#): > > message=\>"Expected one of [A-Za-z0-9\_-], [\t\r\n], "#", "=\>" at line 6, column 15 (byte 75) after input\n{\nfile {\npath =\> "/logs/NETSRV91/\*.log"\ntype =\>"logs"\nstart\_position", :backtrace=\>["/app/ELK\_Binary/logstash-8.7.1/logstash-core/lib/logstash/compiler.rb:32:in `compile\_imperative'" Something is not OK in your conf file at line 6, should be: `start_position => beginning` ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 2, 2023, 2:00pm UTC](https://discuss.elastic.co/t/installation-document-for-elk-8-7/337635/3 "2023-08-02T14:00:41Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.