# Logstash 7 error - ssl trustore path must be string

**URL:** <https://discuss.elastic.co/t/logstash-7-error-ssl-trustore-path-must-be-string/181962>\
**Category:** Logstash\
**Created:** [May 21, 2019, 9:35am UTC](https://discuss.elastic.co/t/logstash-7-error-ssl-trustore-path-must-be-string/181962 "2019-05-21T09:35:45Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![hari.v](https://avatars.discourse-cdn.com/v4/letter/h/eb8c5e/32.png) [@hari.v](https://discuss.elastic.co/u/hari.v)\
**Post date:** [May 21, 2019, 9:35am UTC](https://discuss.elastic.co/t/logstash-7-error-ssl-trustore-path-must-be-string/181962/1 "2019-05-21T09:35:45Z")

</div>

Hi,

i tried to configure logstash nodes.

i followed this document : [https://www.elastic.co/guide/en/logstash/current/configuring-logstash.html](https://www.elastic.co/guide/en/logstash/current/configuring-logstash.html)

i copied the ca.p12 cert from elasticsearch cluster nodes.

my logstash.yml file:

xpack.monitoring.enabled: true  
xpack.monitoring.elasticsearch.username: elastic  
xpack.monitoring.elasticsearch.password: elastic  
xpack.monitoring.elasticsearch.hosts: ["[http://192.168.136.x:9200](http://192.168.136.x:9200)", "[http://192.168.136.x:9200](http://192.168.136.x:9200)"]  
xpack.monitoring.elasticsearch.sniffing: false  
xpack.monitoring.elasticsearch.ssl.truststore.path: ["/home/harry/ca.p12"]

xpack.management.enabled: true  
xpack.management.elasticsearch.username: elastic  
xpack.management.elasticsearch.password: elastic  
xpack.management.elasticsearch.hosts: ["[http://192.168.136.x:9200](http://192.168.136.x:9200)", "[http://192.168.136.x:9200](http://192.168.136.x:9200)"]  
xpack.management.pipeline.id: ["mainpipe"]

my logstash.conf file:

input {  
file {  
path =\> "/home/harry/DAILYDATA\_S24\_201904.csv"  
start\_position =\> beginning

```
}

```

}

filter {  
csv {  
columns =\> [  
"Daily Rainfall Total",  
"Highest 30 Min Rainfall",  
"Highest 60 Min Rainfall",  
"Highest 120 Min Rainfal",  
"Mean Temperature",  
"Maximum Temperature",  
"Minimum Temperature",  
"Mean Wind Speed",  
"Max Wind Speed"  
]  
separator =\> ","  
remove\_field =\> ["message"]  
}  
date {  
match =\> ["time", "ISO8601"]  
}  
mutate {  
convert =\> ["TempOut", "float"]  
}  
}

output {  
elasticsearch {  
hosts =\> ["[http://192.168.136.x:9200](http://192.168.136.x:9200)" , "[http://192.168.136.x:9200](http://192.168.136.x:9200)"]  
user =\> "elastic"  
password =\> "elastic"  
action =\> "index"  
index =\> "weather\_index"  
}  
stdout { }  
}

restarted logstash service, shows below error:

logstash logs:

[2019-05-22T01:30:11,707][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit

[2019-05-22T01:31:21,565][FATAL][logstash.runner] An unexpected error occurred! {:error=\>#\<ArgumentError: Setting "xpack.monitoring.elasticsearch.ssl.truststore.path" must be a String. Received: ["/home/hari/ca.p12"] (Array)\>, :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/settings.rb:235:in `validate'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:411:in`validate'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:421:in `validate'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:198:in`set'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:69:in `set_value'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:88:in`block in merge'", "org/jruby/RubyHash.java:1419:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:88:in`merge'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:137:in `validate_all'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:278:in`execute'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/clamp-0.6.5/lib/clamp/command.rb:67:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:237:in`run'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/clamp-0.6.5/lib/clamp/command.rb:132:in `run'", "/usr/share/logstash/lib/bootstrap/environment.rb:73:in`'"]}  
[2019-05-22T01:31:21,606][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit

please guide me where i make wrong....

thanks

Harry

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [May 21, 2019, 1:05pm UTC](https://discuss.elastic.co/t/logstash-7-error-ssl-trustore-path-must-be-string/181962/2 "2019-05-21T13:05:47Z")

</div>

> [@hari.v](#):
>
> xpack.monitoring.elasticsearch.ssl.truststore.path: ["/home/harry/ca.p12"]

That should be a string, not an array of strings.

---

<div class="post-metadata">

**Author:** ![hari.v](https://avatars.discourse-cdn.com/v4/letter/h/eb8c5e/32.png) [@hari.v](https://discuss.elastic.co/u/hari.v)\
**Post date:** [May 21, 2019, 4:08pm UTC](https://discuss.elastic.co/t/logstash-7-error-ssl-trustore-path-must-be-string/181962/3 "2019-05-21T16:08:11Z")

</div>

Hi

thanks , i have cleared that error.

my logstash.yml file

xpack.monitoring.enabled: true  
xpack.monitoring.elasticsearch.username: elastic  
xpack.monitoring.elasticsearch.password: elastic  
xpack.monitoring.elasticsearch.hosts: ["[http://192.168.x.x:9200](http://192.168.x.x:9200)', "[http://192.168.x.x:9200](http://192.168.x.x:9200)"]  
xpack.monitoring.elasticsearch.sniffing: false  
xpack.monitoring.elasticsearch.ssl.truststore.path: "/etc/logstash/certs/ca/ca.p12"  
xpack.monitoring.elasticsearch.ssl.certificate\_authority: "/etc/logstash/certs/logstash/logstash.p12"  
xpack.monitoring.elasticsearch.ssl.verification\_mode: certificate

xpack.management.enabled: true  
xpack.management.elasticsearch.username: elastic  
xpack.management.elasticsearch.password: elastic  
xpack.management.elasticsearch.hosts: ["[http://192.168.136.159:9200](http://192.168.136.159:9200)", "[http://192.168.136.160:9200](http://192.168.136.160:9200)"]  
xpack.management.pipeline.id: ["mainpipe"]

/etc/logstash/conf.d/logstash.conf file:

input {  
file {  
path =\> "/home/hari/DAILYDATA\_S24\_201904.csv"  
start\_position =\> beginning

```
}

```

}

filter {  
csv {  
columns =\> [  
"Daily Rainfall Total",  
"Highest 30 Min Rainfall",  
"Highest 60 Min Rainfall",  
"Highest 120 Min Rainfal",  
"Mean Temperature",  
"Maximum Temperature",  
"Minimum Temperature",  
"Mean Wind Speed",  
"Max Wind Speed"  
]  
separator =\> ","  
remove\_field =\> ["message"]  
}  
date {  
match =\> ["time", "ISO8601"]  
}  
mutate {  
convert =\> ["TempOut", "float"]  
}  
}

output {  
elasticsearch {  
hosts =\> "[http://192.168.x.x:9200](http://192.168.x.x:9200)" , "[http://192.168.x.x:9200](http://192.168.x.x:9200)"  
user =\> "elastic"  
password =\> "elastic"  
action =\> "index"  
index =\> "weather\_index"  
}  
stdout { }  
}

logstash logs shows below error:

[2019-05-22T07:36:39,386][INFO][logstash.configmanagement.bootstrapcheck] Using Elasticsearch as config store {:pipeline\_id=\>["mainpipe"], :poll\_interval=\>"5000000000 ns"}  
[2019-05-22T07:36:40,910][ERROR][logstash.licensechecker.licensereader] Unable to retrieve license information from license server {:message=\>"Explicit value for 'sche me' was declared, but it is different in one of the URLs given! Please make sure your URLs are inline with explicit values. The URLs have the property set to 'http', b ut it was also set to 'https' explicitly"}  
[2019-05-22T07:36:41,121][ERROR][logstash.configmanagement.elasticsearchsource] Failed to fetch X-Pack information from Elasticsearch. This is likely due to failure to reach a live Elasticsearch cluster.  
[2019-05-22T07:36:41,134][FATAL][logstash.runner] An unexpected error occurred! {:error=\>#\<LogStash::LicenseChecker::LicenseError: Failed to fetch X-Pack inf ormation from Elasticsearch. This is likely due to failure to reach a live Elasticsearch cluster.\>, :backtrace=\>["/usr/share/logstash/x-pack/lib/license\_checker/licens ed.rb:67:in `with_license_check'", "/usr/share/logstash/x-pack/lib/config_management/elasticsearch_source.rb:45:in`initialize'", "/usr/share/logstash/x-pack/lib/confi g\_management/hooks.rb:41:in `after_bootstrap_checks'", "org/logstash/execution/EventDispatcherExt.java:71:in`execute'", "/usr/share/logstash/logstash-core/lib/logstas h/runner.rb:293:in `execute'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/clamp-0.6.5/lib/clamp/command.rb:67:in`run'", "/usr/share/logstash/logstash-core/li b/logstash/runner.rb:237:in `run'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/clamp-0.6.5/lib/clamp/command.rb:132:in`run'", "/usr/share/logstash/lib/bootst rap/environment.rb:73:in `'"]}  
[2019-05-22T07:36:41,187][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit

i tried to run "bin/logstash -f /etc/logstash/conf.d/logstash.conf"

[root@logstash logstash]# bin/logstash -f /etc/logstash/conf.d/logstash.conf  
OpenJDK 64-Bit Server VM warning: If the number of processors is expected to increase from one, then you should configure the number of parallel GC threads appropriately using -XX:ParallelGCThreads=N  
WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults  
Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs errors to the console  
[WARN] 2019-05-22 08:06:17.584 [LogStash::Runner] multilocal - Ignoring the 'pipelines.yml' file because modules or command line options are specified  
[INFO] 2019-05-22 08:06:17.696 [LogStash::Runner] runner - Starting Logstash {"logstash.version"=\>"7.1.0"}  
[ERROR] 2019-05-22 08:06:22.966 [Converge PipelineAction::Create] agent - Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, {, ", ', } at line 35, column 48 (byte 730) after output {\n elasticsearch {\n hosts =\> "[http://192.168.136.159:9200](http://192.168.136.159:9200)" ", :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:41:in `compile_imperative'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:49:in`compile\_graph'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:11:in `block in compile_sources'", "org/jruby/RubyArray.java:2577:in`map'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:10:in `compile_sources'", "org/logstash/execution/AbstractPipelineExt.java:151:in`initialize'", "org/logstash/execution/JavaBasePipelineExt.java:47:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:23:in`initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline\_action/create.rb:36:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:325:in`block in converge\_state'"]}  
[INFO] 2019-05-22 08:06:23.941 [Api Webserver] agent - Successfully started Logstash API endpoint {:port=\>9600}  
[INFO] 2019-05-22 08:06:28.541 [LogStash::Runner] runner - Logstash shut down.  
[root@logstash logstash]#

where i am doing mistake, can help me out...

Thanks  
Harry

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [May 21, 2019, 4:25pm UTC](https://discuss.elastic.co/t/logstash-7-error-ssl-trustore-path-must-be-string/181962/4 "2019-05-21T16:25:45Z")

</div>

You have told xpack to use certificate authentication, but also (in xpack.monitoring.elasticsearch.hosts) told it to use http. That's a conflict.

Also,

```
hosts => "http://192.168.x.x:9200/" , "http://192.168.x.x:9200/"

```

should be

```
hosts => ["http://192.168.x.x:9200/" , "http://192.168.x.x:9200/"]
```

---

<div class="post-metadata">

**Author:** ![hari.v](https://avatars.discourse-cdn.com/v4/letter/h/eb8c5e/32.png) [@hari.v](https://discuss.elastic.co/u/hari.v)\
**Post date:** [May 21, 2019, 4:43pm UTC](https://discuss.elastic.co/t/logstash-7-error-ssl-trustore-path-must-be-string/181962/5 "2019-05-21T16:43:17Z")

</div>

thanks , it works... could see my index

# curl -u elastic [http://192.168.136.159:9200/\_cat/indices](http://192.168.136.159:9200/_cat/indices)

Enter host password for user 'elastic':  
green open .security-7 koLuoo-jRqa-j8XN1n5xyg 1 1 11 2 65.7kb 32.8kb  
green open weather\_index Noqkc3wzQwyC2iuiq4gGSA 1 1 31 0 56.7kb 34.6kb  
green open .kibana\_task\_manager 4YNGPwSQTkalbAd\_DZOIoA 1 1 2 0 25.6kb 12.8kb  
green open .kibana\_1 xRQr4zSdSx2H3v392hNGqA 1 1 3 0 14.1kb 7kb  
green open .tasks HM5IOAj4TH63VIygboUXjw 1 1 1 0 12.7kb 6.3kb  
green open .logstash U9OiOrprR5a46Ed6NdjqGA 1 1 1 0 9.7kb 4.8kb  
green open .kibana\_2 n02ZdJsbQKGG4QT6M9F\_cw 1 1 5 2 69.7kb 34.8kb

i added below lines in logstash.yml file - is that needed?

xpack.security.http.ssl.enabled: true  
xpack.security.http.ssl.keystore.path: /etc/logstash/certs/logstash/logstash.p12  
xpack.security.http.ssl.truststore.path: /etc/logstash/certs/ca/ca.p12

please let me know...

thanks  
harry

---

<div class="post-metadata">

**Author:** ![hari.v](https://avatars.discourse-cdn.com/v4/letter/h/eb8c5e/32.png) [@hari.v](https://discuss.elastic.co/u/hari.v)\
**Post date:** [May 21, 2019, 5:00pm UTC](https://discuss.elastic.co/t/logstash-7-error-ssl-trustore-path-must-be-string/181962/6 "2019-05-21T17:00:57Z")

</div>

Hi

My logstash service is running ... but log file is not updating ...

showing past messages...

i tried to restart logstash service twice but not updating in the logs.

any reason ... even i killed the processes also. but still the same.

[root@logstash ~]# systemctl status logstash  
● logstash.service - logstash  
Loaded: loaded (/etc/systemd/system/logstash.service; enabled; vendor preset: disabled)  
Active: active (running) since Wed 2019-05-22 09:05:32 SGT; 40s ago  
Main PID: 2858 (java)  
CGroup: /system.slice/logstash.service  
└─2858 /bin/java -Xms1g -Xmx1g -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -Djava.awt.headless=true ...

May 22 09:05:32 logstash systemd[1]: logstash.service holdoff time over, scheduling restart.  
May 22 09:05:32 logstash systemd[1]: Started logstash.  
May 22 09:05:32 logstash systemd[1]: Starting logstash...  
May 22 09:05:32 logstash logstash[2858]: OpenJDK 64-Bit Server VM warning: If the number of processors is expected to increase from one, then you should c...CThreads=N  
Hint: Some lines were ellipsized, use -l to show in full.

Thanks  
Harry

---

<div class="post-metadata">

**Author:** ![hari.v](https://avatars.discourse-cdn.com/v4/letter/h/eb8c5e/32.png) [@hari.v](https://discuss.elastic.co/u/hari.v)\
**Post date:** [May 22, 2019, 3:27am UTC](https://discuss.elastic.co/t/logstash-7-error-ssl-trustore-path-must-be-string/181962/7 "2019-05-22T03:27:11Z")

</div>

Badger:

i added below lines in logstash.yml file - is that needed?

xpack.security.http.ssl.enabled: true  
xpack.security.http.ssl.keystore.path: /etc/logstash/certs/logstash/logstash.p12  
xpack.security.http.ssl.truststore.path: /etc/logstash/certs/ca/ca.p12

please let me know...

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 19, 2019, 3:27am UTC](https://discuss.elastic.co/t/logstash-7-error-ssl-trustore-path-must-be-string/181962/8 "2019-06-19T03:27:26Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.