# Logstash configuration error - 15-01-2018

**URL:** <https://discuss.elastic.co/t/logstash-configuration-error-15-01-2018/115486>\
**Category:** Logstash\
**Created:** [January 15, 2018, 7:15am UTC](https://discuss.elastic.co/t/logstash-configuration-error-15-01-2018/115486 "2018-01-15T07:15:49Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![SJN8](https://avatars.discourse-cdn.com/v4/letter/s/f08c70/32.png) [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Post date:** [January 15, 2018, 7:15am UTC](https://discuss.elastic.co/t/logstash-configuration-error-15-01-2018/115486/1 "2018-01-15T07:15:50Z")

</div>

Hi All below in my conf file ,

input {

```
    kafka {
            bootstrap_servers => "sev1:9092 , sev2:9092 , sev3:9092"
            topics => ["mytopic]
          }
   }

```

# The filter part of this file is commented out to indicate that it is

filter {

```
                           json {
                                         source => "message"
                                }

                        mutate {

                                       rename => { "source" => "Log_File" }

                                       remove_field => ["offset", "tags" , "prospector" , "beat" , "@version"]
                                  }
}

```

output {  
stdout { codec =\> rubydebug }  
elasticsearch {  
hosts =\> ["sev1:9200","sev2:9200", "sev3:9200"]  
index =\> "myindex"  
user =\> test  
password =\> mypwd  
}

```
   }

```

While starting , i am getting below exception,

[2018-01-15T07:46:42,415][DEBUG][logstash.agent] Executing action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:mypipeline  
[2018-01-15T07:46:42,420][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:mypipeline, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, { at line 35, column 31 (byte 1232) after output {\r\n stdout { codec =\> rubydebug }\r\n elasticsearch {\r\n hosts =\> ["sev1:9200","sev2:9200", "sev3:9200"]\r\n index =\> "myindex"\r\n user =\> test\r\n password =\> mypwd\r\n ", :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:42:in `compile_imperative'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:50:in`compile\_graph'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:12:in `block in compile_sources'", "org/jruby/RubyArray.java:2486:in`map'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:11:in `compile_sources'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:51:in`initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:171:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:40:in`execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:335:in `block in converge_state'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:141:in`with\_pipelines'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:332:in `block in converge_state'", "org/jruby/RubyArray.java:1734:in`each'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:319:in `converge_state'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:166:in`block in converge\_state\_and\_update'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:141:in `with_pipelines'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:164:in`converge\_state\_and\_update'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:105:in `block in execute'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/stud-0.0.23/lib/stud/interval.rb:18:in`interval'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:94:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:343:in`block in execute'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/stud-0.0.23/lib/stud/task.rb:24:in `block in initialize'"]}

It is related to configuration , please help on the same .  
as i cant see any issue with my configuration file

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 15, 2018, 9:08am UTC](https://discuss.elastic.co/t/logstash-configuration-error-15-01-2018/115486/2 "2018-01-15T09:08:33Z")

</div>

Please format your code using `</>` icon as explained in [this guide](https://discuss.elastic.co/t/about-the-elasticsearch-category/21). It will make your post more readable and will help us help you.

Alternatively use markdown style like this:

````
```
CODE
```
````

---

<div class="post-metadata">

**Author:** ![SJN8](https://avatars.discourse-cdn.com/v4/letter/s/f08c70/32.png) [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Post date:** [January 15, 2018, 9:10am UTC](https://discuss.elastic.co/t/logstash-configuration-error-15-01-2018/115486/3 "2018-01-15T09:10:04Z")

</div>

Hey Mark ,

Thanks , but i got the solution .

user =\> test  
password =\> mypwd

above two should be in double quotes .

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 15, 2018, 9:13am UTC](https://discuss.elastic.co/t/logstash-configuration-error-15-01-2018/115486/4 "2018-01-15T09:13:09Z")

</div>

They should, yes.

But please keep the formatting in mind for future posts, it really makes it much easier to read, and help 🙂

---

<div class="post-metadata">

**Author:** ![SJN8](https://avatars.discourse-cdn.com/v4/letter/s/f08c70/32.png) [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Post date:** [January 15, 2018, 9:13am UTC](https://discuss.elastic.co/t/logstash-configuration-error-15-01-2018/115486/5 "2018-01-15T09:13:41Z")

</div>

Sure , will do .

Thanks .

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 12, 2018, 9:14am UTC](https://discuss.elastic.co/t/logstash-configuration-error-15-01-2018/115486/6 "2018-02-12T09:14:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
