# Invalid Config File

**URL:** <https://discuss.elastic.co/t/invalid-config-file/58859>\
**Category:** Logstash\
**Created:** [August 24, 2016, 7:50pm UTC](https://discuss.elastic.co/t/invalid-config-file/58859 "2016-08-24T19:50:42Z")\
**Posts on this page:** 13\
**Page:** 2

<div class="post-metadata">

**Author:** ![kmk3173](https://avatars.discourse-cdn.com/v4/letter/k/8baadc/32.png) [@kmk3173](https://discuss.elastic.co/u/kmk3173)\
**Post date:** [August 26, 2016, 1:18pm UTC](https://discuss.elastic.co/t/invalid-config-file/58859/21 "2016-08-26T13:18:15Z")

</div>

Once I deleted the previous index and re-ran logstash config file. I now don't have a time-field name field being displayed in the configure index pattern section. How do I fix this in order to visualize the data? Thanks

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [August 26, 2016, 1:21pm UTC](https://discuss.elastic.co/t/invalid-config-file/58859/22 "2016-08-26T13:21:28Z")

</div>

What's the mapping of the `@timestamp` field (use the get mapping API)? Have you refreshed the field list in Kibana?

---

<div class="post-metadata">

**Author:** ![kmk3173](https://avatars.discourse-cdn.com/v4/letter/k/8baadc/32.png) [@kmk3173](https://discuss.elastic.co/u/kmk3173)\
**Post date:** [August 26, 2016, 1:28pm UTC](https://discuss.elastic.co/t/invalid-config-file/58859/23 "2016-08-26T13:28:26Z")

</div>

Here is the result:

{"test2": {"aliases":{}, mappings, settings, : {"index":{"creation\_date":"147...", "number\_of\_shards": "5", "number\_of\_replicas":"1",  
"uuid":"QF...", "version":{"created":"203.."}}}, "warmers":}}}

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [August 26, 2016, 1:52pm UTC](https://discuss.elastic.co/t/invalid-config-file/58859/24 "2016-08-26T13:52:28Z")

</div>

But that's not valid JSON. I'm only asking about the `@timestamp` field so please making sure information about it is included.

---

<div class="post-metadata">

**Author:** ![kmk3173](https://avatars.discourse-cdn.com/v4/letter/k/8baadc/32.png) [@kmk3173](https://discuss.elastic.co/u/kmk3173)\
**Post date:** [August 26, 2016, 1:57pm UTC](https://discuss.elastic.co/t/invalid-config-file/58859/25 "2016-08-26T13:57:57Z")

</div>

Sorry I'm not following I ran cURL -XGET '[http://localhost:9200/test2/](http://localhost:9200/test2/)'

I am not seeing mapping of @timestamp in the field if you see above that was my results

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [August 26, 2016, 2:01pm UTC](https://discuss.elastic.co/t/invalid-config-file/58859/26 "2016-08-26T14:01:01Z")

</div>

Logstash always adds a `@timestamp` field to all events so unless you explicitly delete it the `@timestamp` field will have a mapping defined. Do you have any events in your index?

---

<div class="post-metadata">

**Author:** ![kmk3173](https://avatars.discourse-cdn.com/v4/letter/k/8baadc/32.png) [@kmk3173](https://discuss.elastic.co/u/kmk3173)\
**Post date:** [August 26, 2016, 2:12pm UTC](https://discuss.elastic.co/t/invalid-config-file/58859/27 "2016-08-26T14:12:00Z")

</div>

My template.json is as follows

```
{
     "template" : "test2"
     "settings" : {
                   "index.refresh_interval" : "5s"
       },
       "mappings" : {
                            "_default_" : {
                           "_all_" : { "enabled" : true, "omit_norms" : true },
                           "properties" : {
                          "@timestamp" : { "type" : "date", "doc_values" : true},
                          "location" : {
                                      "type" : "geo_point",
                                      "dynamic" : true,
                                       "properties" : {
                                       "latitude" : { "type" : "float", "doc_values" : true },
                                        "longitude: : {"type" : "float", "doc_values" : true }
                                 }
                           }
                       }
                   }
           }
}

```

Do i need to run anything with cURL to get this to work like previously. For example I ran XPUT '[http://localhost:9200/test](http://localhost:9200/test)' after I ran -XDELETE as it was not finding any indexes.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [August 26, 2016, 2:23pm UTC](https://discuss.elastic.co/t/invalid-config-file/58859/28 "2016-08-26T14:23:46Z")

</div>

Please answer my questions. Do you have any events in your index?

---

<div class="post-metadata">

**Author:** ![kmk3173](https://avatars.discourse-cdn.com/v4/letter/k/8baadc/32.png) [@kmk3173](https://discuss.elastic.co/u/kmk3173)\
**Post date:** [August 26, 2016, 2:30pm UTC](https://discuss.elastic.co/t/invalid-config-file/58859/29 "2016-08-26T14:30:39Z")

</div>

Not sure what you mean. I don't have events written in my json file.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [August 26, 2016, 2:34pm UTC](https://discuss.elastic.co/t/invalid-config-file/58859/30 "2016-08-26T14:34:13Z")

</div>

I'm talking about your Elasticsearch index where you intend to add events. If you haven't yet added anything to your newly created index I'm not sure Kibana will display any fields in the pattern configuration screen.

---

<div class="post-metadata">

**Author:** ![kmk3173](https://avatars.discourse-cdn.com/v4/letter/k/8baadc/32.png) [@kmk3173](https://discuss.elastic.co/u/kmk3173)\
**Post date:** [August 26, 2016, 2:47pm UTC](https://discuss.elastic.co/t/invalid-config-file/58859/31 "2016-08-26T14:47:05Z")

</div>

Where am I looking for the elasticsearch index? I have the logstash config file reading a csv, pulling the longitude/latitude =\> writing it to Elasticsearch, I want to be able to view that in Kibana. What steps are needed to complete this part?

Right now I have the

1. config file in logstash
2. json template in Elastic search template folder

Previously I was able to view the data on Kibana but not able to map the geodata.  
Once I ran XDELETE now I can't view the timestamp index pattern.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [August 26, 2016, 2:52pm UTC](https://discuss.elastic.co/t/invalid-config-file/58859/32 "2016-08-26T14:52:54Z")

</div>

Sorry, but I'm out of patience. Maybe someone else can help out.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:41am UTC](https://discuss.elastic.co/t/invalid-config-file/58859/33 "2017-07-06T04:41:24Z")

</div>



[Previous page](https://discuss.elastic.co/t/invalid-config-file/58859.md?page=1)
