# "LogStash::ConfigurationError", :message=\>"Expected one of #, input, filter, output at line 1, column 1 (byte 1) after ", :backtrace

**URL:** <https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of-input-filter-output-at-line-1-column-1-byte-1-after-backtrace/231818>\
**Category:** Logstash\
**Created:** [May 9, 2020, 4:38am UTC](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of-input-filter-output-at-line-1-column-1-byte-1-after-backtrace/231818 "2020-05-09T04:38:52Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![subramanyam.setty](https://avatars.discourse-cdn.com/v4/letter/s/f475e1/32.png) [@subramanyam.setty](https://discuss.elastic.co/u/subramanyam.setty)\
**Post date:** [May 9, 2020, 4:38am UTC](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of-input-filter-output-at-line-1-column-1-byte-1-after-backtrace/231818/1 "2020-05-09T04:38:52Z")

</div>

Hi team,

I am getting below exception .I have mentioned .conf file and log file which is given input to the .conf.Please let suggest.  
Exception:  
{:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, input, filter, output at line 1, column 1 (byte 1) after ", :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:41:in `compile_imperative'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:49:in `compile\_graph'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:11:in `block in compile_sources'", "org/jruby/RubyArray.java:2577:in `map'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:10:in `compile_sources'", "org/logstash/execution/AbstractPipelineExt.java:151:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:22:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:90:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline\_action/create.rb:43:in `block in execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:96:in `block in exclusive'", "org/jruby/ext/thread/Mutex.java:165:in `synchronize'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:96:in `exclusive'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline\_action/create.rb:39:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:334:in `block in converge\_state'"]}q1`12w

portal.conf:  
input {

file {  
path =\> ["/opt/glassfish9/glassfish/domains/domain1/config/logs/lcportal\_transaction.log"]  
#start\_position =\> "beginning"  
sincedb\_path =\> "/etc/logstash/Portal.sincedb"  
type =\> "lcportal\_transactionlog"  
}  
}

filter {

if ([type] == "lcportal\_transactionlog") {  
grok {  
match =\> ["message","%{DATA:requestTime},%{DATA:BusinessCategory},%{DATA:spId},%{DATA:appId},%{DATA:fromNEType},%{DATA:toNEType},%{DATA:latency},%{DATA:result},%{DATA:subId},"]  
}  
}  
mutate{  
gsub =\> [  
"host",".","_",  
"BusinessCategory",".","_"  
]

```
       }
metrics {
    meter => ["metrics.%{host}.%{appId}.%{BusinessCategory}.%{result}"]
    timer => ["metrics.%{host}.%{appId}.T9lat","%{latency}"]
    clear_interval => 60
    flush_interval => 60
    rates => []
    percentiles => []
}

```

}

output {  
graphite {  
host =\> "XX.XXX.X.X"  
port =\> XXXX  
fields\_are\_metrics =\> true  
exclude\_metrics =\> ["%{[^}]+}", "requestTime","latency","BusinessCategory","spId","appId","fromNEType","toNEType","resultCode","subId","host","message","type","path"]  
resend\_on\_failure =\> true  
}  
}

lcportal\_transaction.log

2020-05-08 04:51:37.246,SB.SUBS@T\_Service,xxxxxx,T\_Service,LC\_T,SB\_SXXX,2001,500,d9499e82-9e41-454c-9e62,  
2020-05-08 04:51:37.244,SB.SUBS@T\_Service,xxxxxx,T\_Service,LC\_T,SB\_SXXX,2002,500,d9499e82-9e41-454c-9e62,  
2020-05-08 04:51:37.230,SB.SUBS@T\_Service,xxxxxx,T\_Service,LC\_T,SB\_SXXX,2002,500,1b5326b8-ad11-4da3-b44a,  
2020-05-08 04:51:37.222,SB.SUBS@T\_Service,xxxxxx,T\_Service,LC\_T,SB\_SXXX,2005,500,2f03f58d-3074-4466-9e92,

---

<div class="post-metadata">

**Author:** ![ptamba](https://avatars.discourse-cdn.com/v4/letter/p/7feea3/32.png) [@ptamba](https://discuss.elastic.co/u/ptamba)\
**Post date:** [May 9, 2020, 6:36am UTC](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of-input-filter-output-at-line-1-column-1-byte-1-after-backtrace/231818/2 "2020-05-09T06:36:51Z")

</div>

> [@subramanyam.setty](#):
>
> > "Expected one of #, input, filter, output at line 1, column 1 (byte 1) after ", :backtrace=\>

syntax error in your conf, line 1. you don’t have that `portal.conf` statement in your conf file by any chance ?

---

<div class="post-metadata">

**Author:** ![subramanyam.setty](https://avatars.discourse-cdn.com/v4/letter/s/f475e1/32.png) [@subramanyam.setty](https://discuss.elastic.co/u/subramanyam.setty)\
**Post date:** [May 11, 2020, 3:52pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of-input-filter-output-at-line-1-column-1-byte-1-after-backtrace/231818/3 "2020-05-11T15:52:23Z")

</div>

Hi Tamba,

Thanks for the response my .conf has the syntax issues.

Thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 8, 2020, 4:04pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of-input-filter-output-at-line-1-column-1-byte-1-after-backtrace/231818/4 "2020-06-08T16:04:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.