# Logstash aggregate plugin problem **URL:** \ **Category:** Logstash\ **Created:** [November 2, 2017, 1:49pm UTC](https://discuss.elastic.co/t/logstash-aggregate-plugin-problem/106204 "2017-11-02T13:49:02Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![lkofman](https://avatars.discourse-cdn.com/v4/letter/l/b9e5f3/32.png) [@lkofman](https://discuss.elastic.co/u/lkofman)\ **Post date:** [November 2, 2017, 1:49pm UTC](https://discuss.elastic.co/t/logstash-aggregate-plugin-problem/106204/1 "2017-11-02T13:49:02Z")
I work with ELK 6 after that I have installed aggregate plugin -logstash refuses to work: C:\DoLense\logstash\bin\>gem install --local -f logstash-filter-aggregate-2.6.4.gem Successfully installed logstash-filter-aggregate-2.6.4 Parsing documentation for logstash-filter-aggregate-2.6.4 Done installing documentation for logstash-filter-aggregate after 1 seconds 1 gem installed C:\DoLense\logstash\bin\>logstash -f C:\DoLense\logstash\config\logstash.conf Sending Logstash's logs to C:/DoLense/logstash/logs which is now configured via log4j2.properties [2017-11-02T15:40:48,461][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"fb\_apache", :directory=\>"C:/DoLense/logstash/modules/fb\_apache/configuration"} [2017-11-02T15:40:48,479][INFO][logstash.modules.scaffold] Initializing module {:module\_name=\>"netflow", :directory=\>"C:/DoLense/logstash/modules/netflow/configuration"} [2017-11-02T15:40:48,541][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified [2017-11-02T15:40:49,479][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600} [2017-11-02T15:40:51,850][ERROR][logstash.plugins.registry] Problems loading a plugin with {:type=\>"filter", :name=\>"aggregate", :path=\>"logstash/filters/aggregate", :error\_message=\>"NameError", :error\_class=\>NameError, :error\_backtrace=\>["C:/DoLense/logstash/logstash-core/lib/logstash/plugins/registry.rb:226:in `namespace_lookup'", "C:/DoLense/logstash/logstash-core/lib/logstash/plugins/registry.rb:162:in`legacy\_lookup'", "C:/DoLense/logstash/logstash-core/lib/logstash/plugins/registry.rb:138:in `lookup'", "C:/DoLense/logstash/logstash-core/lib/logstash/plugins/registry.rb:180:in`lookup\_pipeline\_plugin'", "C:/DoLense/logstash/logstash-core/lib/logstash/plugin.rb:140:in `lookup'", "C:/DoLense/logstash/logstash-core/lib/logstash/pipeline.rb:143:in`plugin'", "(eval):64:in `'", "org/ jruby/RubyKernel.java:1000:in`eval'", "C:/DoLense/logstash/logstash-core/lib/logstash/pipeline.rb:82:in `initialize'", "C:/DoLense/logstash/logstash-core/lib/logstash/pipeline.rb:215:in`initialize'", "C:/DoLense/logstash/logstash-core/lib/logstash/pipeline\_action/create.rb:35:in `execute'", "C:/DoLense/logstash/logstash-core/lib/logstash/agent.rb:335:in`block in converge\_state'", "C:/DoLense/logstash/logstash-core/lib/logstash/agent.rb:141:in `with_pipelines'", "C:/DoLense/logstash/logstash-core/lib/logstash/agent.rb:332:in`block in converge\_state'", "org/jruby/RubyArray.java:1734:in `each'", "C:/DoLense/logstash/logstash-core/lib/logstash/agent.rb:319:in`converge\_state'", "C:/DoLense/logstash/logstash-core/lib/logstash/agent.rb:166:in `block in converge_state_and_update'", "C:/DoLens e/logstash/logstash-core/lib/logstash/agent.rb:141:in`with\_pipelines'", "C:/DoLense/logstash/logstash-core/lib/logstash/agent.rb:164:in `converge_state_and_update'", "C:/DoLense/logstash/logstash-core/lib/logstash/agent.rb:90:in`execute'", "C:/DoLense/logstash/logstash-core/lib/logstash/runner.rb:359:in `block in execute'", "C:/DoLense/logstash/vendor/bundle/jruby/2.3.0/gems/stud-0.0.23/lib/stud/task.rb:24:in`block in initialize'"]} [2017-11-02T15:40:51,901][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::PluginLoadingError", :message=\>"Couldn't find any filter plugin named 'aggregate'. Are you sure this is correct? Trying to load the aggregate filter plugin resulted in this error: Problems loading the requested plugin named aggregate of type filter. Error: NameError NameError"} logstash.conf: input { beats{ type =\> beats port =\> 5044 } } filter{ if [type] == "beats" { grok { break\_on\_match =\> true keep\_empty\_captures =\> false match =\> { message =\> [ "%{NUMBER:threadid};%{TIMESTAMP\_ISO8601:eventutctime};%{DATA:username};%{JAVACLASS:apiname};%{WORD:apireturnstatus};%{WORD:componentname};%{BASE10NUM:customisation-level};%{BASE10NUM:cputimeinmillisec};%{WORD:runmode};%{WORD:errorcodeiffailure}", "%{NUMBER:threadid};%{TIMESTAMP\_ISO8601:eventutctime};%{DATA:username};%{JAVACLASS:apiname};%{WORD:apireturnstatus};%{WORD:componentname};%{BASE10NUM:customisation-level};%{BASE10NUM:cputimeinmillisec};%{WORD:runmode};(%{GREEDYDATA:errorcodeiffailure})\s\*%{GREEDYDATA:error\_description}" ] } patterns\_dir =\> "C:\DoLense\Patterns\patterns" } date { match =\> ["eventutctime" , "yyyy-MM-dd HH:mm:ss.SSS"] } ``` aggregate { task_id => "%{apiname}" code => "map['threadid'] ; map['username']; map['customisation-level']" } } ``` } output { elasticsearch { hosts=\>"localhost:9200" index =\> "logstash%{+YYYY.MM.dd}%{type}" } stdout {codec=\> rubydebug } } ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 30, 2017, 1:49pm UTC](https://discuss.elastic.co/t/logstash-aggregate-plugin-problem/106204/2 "2017-11-30T13:49:03Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.