Logstash config error reason=>"Expected one of #, \", ', }

Elastic Stack Logstash
4

I can't see the root of your problem, but one thing that has helped me immensely in troubleshooting a config file is to comment out everything but the first step, and then "build" the config back up from there, doing the --configtest thing every step. So you could start with
input {
file {
path => [ "Documents/apache-sample-dataset.log" ]
type => "apache"
start_position => "beginning"
}
}

#filter {
#if [type] == "apache" {
#grok {
#match => ["message", "%{COMBINEDAPACHELOG}"]
#}
#}
#date {
#match => [ "timestamp" , "dd/MMM/yyyy:HH:mm:ss Z" ]
#}
#geoip {
#source => "clientip"
#target => "geoip"
#database => "Documents/GeoLiteCity.dat"
#add_field => [ "[geoip][coordinates]", "%{[geoip][longitude]}" ]
#add_field => [ "[geoip][coordinates]", "%{[geoip][latitude]}" ]
#}
#mutate {
#convert => [ "[geoip][coordinates]", "float" ]
#}
#}

#output {
#elasticsearch {
#host => localhost
#}
#}

and add on from there

1 Like