# Logstash 6.4.2 Failed to execute action

**URL:** <https://discuss.elastic.co/t/logstash-6-4-2-failed-to-execute-action/153085>\
**Category:** Logstash\
**Created:** [October 18, 2018, 11:15pm UTC](https://discuss.elastic.co/t/logstash-6-4-2-failed-to-execute-action/153085 "2018-10-18T23:15:45Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jpsilliman](https://avatars.discourse-cdn.com/v4/letter/j/8dc957/32.png) [@jpsilliman](https://discuss.elastic.co/u/jpsilliman)\
**Post date:** [October 18, 2018, 11:15pm UTC](https://discuss.elastic.co/t/logstash-6-4-2-failed-to-execute-action/153085/1 "2018-10-18T23:15:45Z")

</div>

I am unable to resolve a config file error. Please advise if you have any suggestions.

Error:  
[2018-10-18T22:58:49,787][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, } at line 102, column 34 (byte 4337) after output {\n #stdout { codec =\> rubydebug }\n elasticsearch { hosts =\> 10.100", :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:41:in `compile_imperative'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:49:in`compile\_graph'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:11:in `block in compile_sources'", "org/jruby/RubyArray.java:2486:in`map'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:10:in `compile_sources'", "org/logstash/execution/AbstractPipelineExt.java:149:in`initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:22:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:90:in`initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline\_action/create.rb:38:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:309:in`block in converge\_state'"]}  
[2018-10-18T22:58:55,003][WARN][logstash.outputs.elasticsearch] You are using a deprecated config setting "document\_type" set in elasticsearch. Deprecated settings will continue to work, but are scheduled for removal from logstash in the future. Document types are being deprecated in Elasticsearch 6.0, and removed entirely in 7.0. You should avoid this feature If you have any questions about this, please visit the #logstash channel on freenode irc. {:name=\>"document\_type", :plugin=\>\<LogStash::Outputs::ElasticSearch bulk\_path=\>"/\_xpack/monitoring/\_bulk?system\_id=logstash&system\_api\_version=2&interval=1s", hosts=\>[[http://10.100.130.72:9200](http://10.100.130.72:9200)], sniffing=\>false, manage\_template=\>false, id=\>"78e4d350ee278e4b233a0d4bede98ed7756d77c6bb7b75c89ad73ac50836a91d", document\_type=\>"%{[@metadata][document\_type]}", enable\_metric=\>true, codec=\>\<LogStash::Codecs::Plain id=\>"plain\_15e95f80-83f5-4fe8-9d72-f5ed6b3f1e58", enable\_metric=\>true, charset=\>"UTF-8"\>, workers=\>1, template\_name=\>"logstash", template\_overwrite=\>false, doc\_as\_upsert=\>false, script\_type=\>"inline", script\_lang=\>"painless", script\_var\_name=\>"event", scripted\_upsert=\>false, retry\_initial\_interval=\>2, retry\_max\_interval=\>64, retry\_on\_conflict=\>1, action=\>"index", ssl\_certificate\_verification=\>true, sniffing\_delay=\>5, timeout=\>60, pool\_max=\>1000, pool\_max\_per\_route=\>100, resurrect\_delay=\>5, validate\_after\_inactivity=\>10000, http\_compression=\>false\>}

The concatenated config file is at [https://pastebin.com/SFxw41aa](https://pastebin.com/SFxw41aa)

---

<div class="post-metadata">

**Author:** ![jpsilliman](https://avatars.discourse-cdn.com/v4/letter/j/8dc957/32.png) [@jpsilliman](https://discuss.elastic.co/u/jpsilliman)\
**Post date:** [October 21, 2018, 3:30pm UTC](https://discuss.elastic.co/t/logstash-6-4-2-failed-to-execute-action/153085/2 "2018-10-21T15:30:56Z")

</div>

Still unable to resolve the issue. Does anyone have a suggestion?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 18, 2018, 3:30pm UTC](https://discuss.elastic.co/t/logstash-6-4-2-failed-to-execute-action/153085/3 "2018-11-18T15:30:58Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.