Logstash Block in block in converge_state

Hi
Below is my Logstash (7.2.0) conf file:

input {
  http_poller {
    urls => {
    snowsr => {
    url => "https://now.com/api/now/table/u_service_request?sysparm_display_value=true&sysparm_exclude_reference_link=true"
    #url => "https://now.com/api/now/table/u_service_request?sysparm_query=sys_updated_onONLast%2045%20minutes@javascript:gs.beginningOfLast45Minutes()@javascript:gs.endOfLast45Minutes()&sysparm_display_value=true&sysparm_exclude_reference_link=true"
    user => "user"
    password => "C23eeer"
    headers => {Accept => "application/json"}
    }
}
request_timeout => 60
metadata_target => "http_poller_metadata"
schedule => { cron => " * * * * * UTC"}
#codec => "json"
}
}
filter
   {
   json
       {
       source => "result"
       }
   split
        {
        field => ["result"]
        }
date {
  match => ["[result][sys_created_on]","yyyy-MM-dd HH:mm:ss"]
  target => "sys_created_on"
     }
date {
  match => ["[result][sys_updated_on]","yyyy-MM-dd HH:mm:ss"]
  target => "sys_updated_on"
     }
date {
  match => ["[result][opened_at]","yyyy-MM-dd HH:mm:ss"]
  target => "opened_at"
     }
date {
  match => ["[result][closed_at]","yyyy-MM-dd HH:mm:ss"]
  target => "closed_at"
     }
date {
  match => ["[result][u_resolved_at]","yyyy-MM-dd HH:mm:ss"]
  target => "resolved_at"
     }
}
output {
  elasticsearch {
    hosts => ["10.19.85.209:9200"]
    index => "srequestsnow"
    action=>update
    document_id => "%{[result][number]}"
    doc_as_upsert =>true
}
        stdout { codec => rubydebug }
}

Below is my Error log:

> [2020-01-13T00:56:46,722][ERROR][logstash.agent ] Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:snowsr, :exception=>"LogStash::ConfigurationError", :message=>"Expected one of #, {, } at line 7, column 5 (byte 468) after input {\n http_poller {\n urls => {\n snowsr => {\n url => \"https://lsk12dev.service-now.com/api/now/table/u_service_request?sysparm_display_value=true&sysparm_exclude_reference_link=true\"\n #url => \"https://lsk12dev.service-now.com/api/now/table/u_service_request?sysparm_query=sys_updated_onONLast%2045%20minutes@javascript:gs.beginningOfLast45Minutes()@javascript:gs.endOfLast45Minutes()&sysparm_display_value=true&sysparm_exclude_reference_link=true\"\n ", :backtrace=>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:41:in compile_imperative'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:49:in compile_graph'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:11:in block in compile_sources'", "org/jruby/RubyArray.java:2577:in map'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:10:in compile_sources'", "org/logstash/execution/AbstractPipelineExt.java:151:in initialize'", "org/logstash/execution/JavaBasePipelineExt.java:47:in initialize'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:24:in initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:36:in execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:325:in block in converge_state'"]}

Help me with where im missing.

Thanks.

Regards,
Katara

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.