I got the following error when i started logstash.
error no 1=>[ERROR][logstash.pipeline ] Error registering plugin {:pipeline_id=>"main", :plugin=>"#<LogStash::OutputDelegator:0x2edd9e81 @namespaced_metric=#<LogStash::Instrument::NamespacedMetric:0x78118e56 @metric=#<LogStash::Instrument::Metric:0xa5c4fbb @collector=#<LogStash::Instrument::Collector:0x56f17d26 @agent=nil, @metric_store=#<LogStash::Instrument::MetricStore:0x149ac8ef @store=#<Concurrent:
0x00000000000fb0 entries=3 default_proc=nil>, @structured_lookup_mutex=#Mutex:0x5501795a, @fast_lookup=#<Concurrent:0x00000000000fb4 entries=63 default_proc=nil>>>>, @namespace_name=[:stats, :pipelines, :main, :plugins, :outputs, :"062ae3e86ce32acad2bc0f2cde713967554395ab00cf86721d170e4eb0d08fe2"]>
Error no 2=>[ERROR][logstash.pipeline ] Pipeline aborted due to error {:pipeline_id=>"main", :exception=>java.io.IOException: Invalid keystore format, :backtrace=>["sun.security.provider.JavaKeyStore.engineLoad(sun/security/provider/JavaKeyStore.java:658)", "sun.security.provider.JavaKeyStore$JKS.engineLoad(sun/security/provider/JavaKeyStore.java:56)", "sun.security.provider.KeyStoreDelegator.engineLoad(sun/security/provider/KeyStoreDelegator.java:224)", "sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(sun/security/provider/JavaKeyStore.java:70)", "java.security.KeyStore.load(java/security/KeyStore.java:1445)", "java.lang.reflect.Method.invoke(java/lang/reflect/Method.java:498)", "org.jruby.javasupport.JavaMethod.invokeDirectWithExceptionHandling(org/jruby/javasupport/JavaMethod.java:423)", "org.jruby.javasupport.JavaMethod.invokeDirect(org/jruby/javasupport/JavaMethod.java:290)", "home.splunk.Installation.$6_dot_6_dot_2_ELK.logstash_minus_6_dot_2_dot_2.vendor.bundle.jruby.$2_dot_3_dot_0.gems.manticore_minus_0_dot_6_dot_1_minus_java.lib.manticore.client.block in get_store(/home/splunk/Installation/6.6.2_ELK/logstash-6.2.2/vendor/bundle/jruby/2.3.0/gems/manticore-0.6.1-java/lib/manticore/client.rb:683)", "org.jruby.RubyKernel.tap(org/jruby/RubyKernel.java:1741)", "org.jruby.RubyKernel$INVOKER$s$0$0$tap.call(org/jruby/RubyKernel$INVOKER$s$0$0$tap.gen)", "home.splunk.Installation.$6_dot_6_dot_2_ELK.logstash_minus_6_dot_2_dot_2.vendor.bundle.jruby.$2_dot_3_dot_0.gems.manticore_minus_0_dot_6_dot_1_minus_java.lib.manticore.client.get_store(/home/splunk/Installation/6.6.2_ELK/logstash-6.2.2/vendor/bundle/jruby/2.3.0/gems/manticore-0.6.1-java/lib/manticore/client.rb:681)", "home.splunk.Installation.$6_dot_6_dot_2_ELK.logstash_minus_6_dot_2_dot_2.vendor.bundle.jruby.$2_dot_3_dot_0.gems.manticore_minus_0_dot_6_dot_1_minus_java.lib.manticore.client.RUBY$method$get_store$0$VARARGS(home/splunk/Installation/$6_dot_6_dot_2_ELK/logstash_minus_6_dot_2_dot_2/vendor/bundle/jruby/$2_dot_3_dot_0/gems/manticore_minus_0_dot_6_dot_1_minus_java/lib/manticore//home/splunk/Installation/6.6.2_ELK/logstash-6.2.2/vendor/bundle/jruby/2.3.0/gems/manticore-0.6.1-java/lib/manticore/client.rb)", "home.splunk.Installation.$6_dot_6_dot_2_ELK.logstash_minus_6_dot_2_dot_2.vendor.bundle.jruby.$2_dot_3_dot_0.gems.manticore_minus_0_dot_6_dot_1_minus_java.lib.manticore.client.setup_trust_store(/home/splunk/Installation/6.6.2_ELK/logstash-6.2.2/vendor/bundle/jruby/2.3.0/gems/manticore-0.6.1-java/lib/manticore/client.rb:625)", "home.splunk.Installation.$6_dot_6_dot_2_ELK.logstash_minus_6_dot_2_dot_2.vendor.bundle.jruby.$2_dot_3_dot_0.gems.manticore_minus_0_dot_6_dot_1_minus_java.lib.manticore.client.RUBY$method$ssl_socket_factory_from_options$0$VARARGS(home/splunk/Installation/$6_dot_6_dot_2_ELK/logstash_minus_6_dot_2_dot_2/vendor/bundle/jruby/$2_dot_3_dot_0/gems/manticore_minus_0_dot_6_dot_1_minus_java/lib/manticore//home/splunk/Installation/6.6.2_ELK/logstash-6.2.2/vendor/bundle/jruby/2.3.0/gems/manticore-0.6.1-java/lib/manticore/client.rb)", "home.splunk.Installation.$6_dot_6_dot_2_ELK.logstash_minus_6_dot_2_dot_2.vendor.bundle.jruby.$2_dot_3_dot_0.gems.manticore_minus_0_dot_6_dot_1_minus_java.lib.manticore.client.pool_builder(/home/splunk/Installation/6.6.2_ELK/logstash-6.2.2/vendor/bundle/jruby/2.3.0/gems/manticore-0.6.1-java/lib/manticore/client.rb:394)","home.splunk.Installation.$6_dot_6_dot_2_ELK.logstash_minus_6_dot_2_dot_2.vendor.bundle.jruby.$2_dot_3_dot_0.gems.manticore_minus_0_dot_6_dot_1_minus_java.lib.manticore.client.RUBY$method$pool_builder$0$VARARGS(home/splunk/Installation/$6_dot_6_dot_2_ELK/logstash_minus_6_dot_2_dot_2/vendor/bundle/jruby/$2_dot_3_dot_0/gems/manticore_minus_0_dot_6_dot_1_minus_java/lib/manticore//home/splunk/Installation/6.6.2_ELK/logstash-6.2.2/vendor/bundle/jruby/2.3.0/gems/manticore-0.6.1-java/lib/manticore/client.rb)", "org.jruby.RubyClass$INVOKER$i$newInstance.call(org/jruby/RubyClass$INVOKER$i$newInstance.gen)", "home.splunk.Installation.$6_dot_6_dot_2_ELK.logstash_minus_6_dot_2_dot_2.vendor.bundle.jruby.$2_dot_3_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_"home.splunk.Installation.$6_dot_6_dot_2_ELK.logstash_minus_6_dot_2_dot_2.logstash_minus_core.lib.logstash.pipeline.RUBY$method$run$0$VARARGS(home/splunk/Installation/$6_dot_6_dot_2_ELK/logstash_minus_6_dot_2_dot_2/logstash_minus_core/lib/logstash//home/splunk/Installation/6.6.2_ELK/logstash-6.2.2/logstash-core/lib/logstash/pipeline.rb)", "home.splunk.Installation.$6_dot_6_dot_2_ELK.logstash_minus_6_dot_2_dot_2.logstash_minus_core.lib.logstash.pipeline.block in start(/home/splunk/Installation/6.6.2_ELK/logstash-6.2.2/logstash-core/lib/logstash/pipeline.rb:249)", "org.jruby.RubyProc.call(org/jruby/RubyProc.java:289)", "org.jruby.RubyProc.call(org/jruby/RubyProc.java:246)", "java.lang.Thread.run(java/lang/Thread.java:748)"], :thread=>"#<Thread:0x5d08ebb4 run>"}
error no 3=>[ERROR][logstash.agent ] Failed to execute action {:id=>:main, :action_type=>LogStash::ConvergeResult::FailedAction, :message=>"Could not execute action: LogStash::PipelineAction::Create/pipeline_id:main, action_result: false", :backtrace=>nil}
for error no 2,I went to this link=https://github.com/elastic/logstash/commit/280722ea70e3ddca96204d44cd14bb37d789fc7e,here they are saying in the third file that is logstash-core/spec/logstash/config/mixin_spec.rb to change.But the point is there is no such path exist.Correct me if i am wrong in problem solving approach.Please provide me solution for all the above errors.
Now comes here my config file:- I didnt give any filter as it is optional.One more thing i like to add is that I am using search guard with elastic search so i gave user pwd ssl and those stuffs.
input {
beats {
port => "5044"
type => "weblog"
}
}
filter{
}
output {
elasticsearch {
user => user
password => user
ssl => true
ssl_certificate_verification => true
truststore => "some path which i gave"
truststore_password => pwd
hosts => ["xx.xxx.xxx.xxx:9200"]
sniffing => true
index => "xyz"
}
stdout { codec => rubydebug }
}