# Logstash::ConfigurationError-message **URL:** https://discuss.elastic.co/t/logstash-configurationerror-message/183364 **Category:** Logstash **Created:** [May 29, 2019, 3:00pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-message/183364 "2019-05-29T15:00:43Z") **Posts on this page:** 10 **Page:** 1
### Author: ![soufiane1](https://avatars.discourse-cdn.com/v4/letter/s/dfb087/32.png) [@soufiane1](https://discuss.elastic.co/u/soufiane1) #### Post date: [May 29, 2019, 3:00pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-message/183364/1 "2019-05-29T15:00:43Z")
Hello everyone, i am uploading a csv file with the following code : ############################################################################################################### input { file { path =\> "C:/Users/BEKRISO/KIBANA7.0.1/INPUT/9r\_piste\_audit.csv" start\_position =\> "beginning" sincedb\_path =\> "C:/Users/BEKRISO/KIBANA7.0.1/sincedb" } } ############################################################################################################################ filter { csv { separator =\> "," ``` columns => ["Date et heure","Utilisateur","Code","Libellé évènement","Code retour","Application","Code site","Objet Start","Usage cache","Valeur avant modif","Valeur après modif"] mutate { convert => { "Date et heure" => "keyword" }} mutate { convert => { "Utilisateur" => "keyword" }} mutate { convert => { "Code" => "keyword" }} mutate { convert => { "Libellé évènement" => "keyword" }} mutate { convert => { "Code retour" => "keyword" }} mutate { convert => { "Application" => "keyword" }} mutate { convert => { "Code site" => "keyword" }} mutate { convert => { "Objet Start" => "keyword" }} mutate { convert => { "Usage cache" => "keyword" }} mutate { convert => { "Valeur avant modif" => "keyword" }} mutate { convert => { "Valeur après modif" => "keyword" }} } ``` } ############################################################################################################################## output { elasticsearch { hosts =\> "cas0000658713:9200" index =\> "monbeaunode\_1" } stdout {} } ############################################################################################################################ when i run this code, i receive the following error : [2019-05-29T16:50:13,482][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, =\> at line 23, column 10 (byte 673) after filter\r\n{\r\n\tcsv\r\n\t{\r\n\t\tseparator =\> ","\r\n\t\t\r\n\t\tcolumns =\> ["Date et heure","Utilisateur","Code","Libell├® ├®v├¿nement","Code retour","Application","Code site","Objet Start","Usage cache","Valeur avant modif","Valeur apr├¿s modif"]\r\n\t\t\r\n\t\tmutate ", :backtrace=\>["C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/compiler.rb:41:in `compile_imperative'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/compiler.rb:49:in`compile\_graph'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/compiler.rb:11:in `block in compile_sources'", "org/jruby/RubyArray.java:2577:in`map'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/compiler.rb:10:in `compile_sources'", "org/logstash/execution/AbstractPipelineExt.java:151:in`initialize'", "org/logstash/execution/JavaBasePipelineExt.java:47:in `initialize'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/java_pipeline.rb:23:in`initialize'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/pipeline\_action/create.rb:36:in `execute'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/agent.rb:325:in`block in converge\_state'"]} can anyone pls tell me what is the problem? ---
### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger) #### Post date: [May 29, 2019, 4:10pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-message/183364/2 "2019-05-29T16:10:49Z")
You are confusing the convert option to the csv filter with a mutate filter. So you can use either ``` filter { csv { separator => "," columns => ["Date et heure","Utilisateur","Code","Libellé évènement","Code retour","Application","Code site","Objet Start","Usage cache","Valeur avant modif","Valeur après modif"] convert => { "Date et heure" => "string" } [...] } ``` or ``` filter { csv { separator => "," columns => ["Date et heure","Utilisateur","Code","Libellé évènement","Code retour","Application","Code site","Objet Start","Usage cache","Valeur avant modif","Valeur après modif"] } mutate { convert => { "Date et heure" => "string" } [...] } ``` Note also that "keyword" is not a valid conversion. The fields will most likely be string by default so the convert is probably not needed. The convert option expects a hash, so if I were doing multiple conversions I would use ``` filter { csv { columns => [...] convert => { "someNumber" => "integer" "column2" => "boolean" } [...] ``` If you specify an option to a filter more than once then most of the time it will do what you want, but sometimes it will do something else and confuse the hell out of you. ---
### Author: ![soufiane1](https://avatars.discourse-cdn.com/v4/letter/s/dfb087/32.png) [@soufiane1](https://discuss.elastic.co/u/soufiane1) #### Post date: [May 31, 2019, 12:31pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-message/183364/3 "2019-05-31T12:31:03Z")
Thank you for your reply, I have made some changes but I am still receiving some ERRORS, ####CODE##### input { file { path =\> "C:/Users/BEKRISO/KIBANA7.0.1/INPUT/9r\_piste\_audit.csv" start\_position =\> "beginning" sincedb\_path =\> "C:/Users/BEKRISO/KIBANA7.0.1/sincedb" } } ############################################################################################################################ filter { csv { separator =\> "," ``` columns => ["Date et heure","Utilisateur","Code","Libellé évènement","Code retour","Application","Code site","Objet Start","Usage cache","Valeur avant modif","Valeur après modif"] convert => { "Date et heure" => "date" } convert => { "Utilisateur" => "string" } convert => { "Code" => "integer" } convert => { "Libellé évènement" => "string" } convert => { "Code retour" => "integer" } convert => { "Application" => "string" } convert => { "Code site" => "integer" } convert => { "Objet Start" => "string" } convert => { "Usage cache" => "boolean" } convert => { "Valeur avant modif" => "string" } convert => { "Valeur après modif" => "string" } } ``` } ############################################################################################################################## output { elasticsearch { hosts =\> "cas0000658713:9200" index =\> "monbeaunode\_1" } stdout {} } #####ERRORS##### [2019-05-31T14:27:23,191][ERROR][logstash.javapipeline] Pipeline aborted due to error {:pipeline\_id=\>"main", :exception=\>#\, :backtrace=\>["C:/Users/BEKRISO/KIBANA7.0.1/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-csv-3.0.10/lib/logstash/filters/csv.rb:111:in `register'", "org/logstash/config/ir/compiler/AbstractFilterDelegatorExt.java:56:in`register'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/java\_pipeline.rb:191:in `block in register_plugins'", "org/jruby/RubyArray.java:1792:in`each'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/java\_pipeline.rb:190:in `register_plugins'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/java_pipeline.rb:446:in`maybe\_setup\_out\_plugins'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/java\_pipeline.rb:203:in `start_workers'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/java_pipeline.rb:145:in`run'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/java\_pipeline.rb:104:in `block in start'"], :thread=\>"#\"} [2019-05-31T14:27:23,238][ERROR][logstash.agent] Failed to execute action {:id=\>:main, :action\_type=\>LogStash::ConvergeResult::FailedAction, :message=\>"Could not execute action: PipelineAction::Create, action\_result: false", :backtrace=\>nil} ---
### Author: ![pastechecker](https://avatars.discourse-cdn.com/v4/letter/p/0ea827/32.png) [@pastechecker](https://discuss.elastic.co/u/pastechecker) #### Post date: [May 31, 2019, 12:43pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-message/183364/4 "2019-05-31T12:43:18Z")
Can you post exemplary csv line you have? I will try to parse it. ---
### Author: ![soufiane1](https://avatars.discourse-cdn.com/v4/letter/s/dfb087/32.png) [@soufiane1](https://discuss.elastic.co/u/soufiane1) #### Post date: [May 31, 2019, 1:16pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-message/183364/5 "2019-05-31T13:16:42Z")
Date et heure,Utilisateur,Code,Libellé évènement,Code retour,Application,Code site,Objet Start,Usage cache,Valeur avant modif ,Valeur après modif 27/05/2019 10:54,,1,Appel à la passerelle par une application cliente,0,9R,990,TA-ESHMA-0,NON,, 27/05/2019 10:12,,1,Appel à la passerelle par une application cliente,0,9R,990,TA-ESHMA-0,NON,, ---
### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger) #### Post date: [May 31, 2019, 2:30pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-message/183364/6 "2019-05-31T14:30:42Z")
> [@soufiane1](#): > > Invalid conversion types: string\>, :backtrace=\>["C:/Users/BEKRISO/KIBANA7.0.1/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-csv-3.0.10/lib/logstash/filters/csv.rb:111:in `register'",` string is not a supported conversion type for a [csv](https://www.elastic.co/guide/en/logstash/current/plugins-filters-csv.html#plugins-filters-csv-convert) filter. It is supported for a [mutate](https://www.elastic.co/guide/en/logstash/current/plugins-filters-mutate.html#plugins-filters-mutate-convert) filter. ---
### Author: ![soufiane1](https://avatars.discourse-cdn.com/v4/letter/s/dfb087/32.png) [@soufiane1](https://discuss.elastic.co/u/soufiane1) #### Post date: [May 31, 2019, 3:19pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-message/183364/7 "2019-05-31T15:19:02Z")
with the following code : input { file { path =\> "C:/Users/BEKRISO/KIBANA7.0.1/INPUT/9r\_piste\_audit.csv" start\_position =\> "beginning" sincedb\_path =\> "C:/Users/BEKRISO/KIBANA7.0.1/sincedb" } } ############################################################################################################################ filter { csv { separator =\> "," ``` columns => ["Date et heure","Utilisateur","Code","Libellé évènement","Code retour","Application","Code site","Objet Start","Usage cache","Valeur avant modif","Valeur après modif"] } mutate{ convert => { "Date et heure" => "float" "Utilisateur" => "string" "Code" => "integer" "Libellé évènement" => "string" "Code retour" => "integer" "Application" => "string" "Code site" => "integer" "Objet Start" => "string" "Usage cache" => "sring" "Valeur avant modif" => "string" "Valeur après modif" => "string" } } ``` } ############################################################################################################################## output { elasticsearch { hosts =\> "cas0000658713:9200" index =\> "monbeaunode\_1" } stdout {} } I still receive the ERROR [2019-05-31T17:11:25,312][ERROR][logstash.javapipeline] Pipeline aborted due to error {:pipeline\_id=\>"main", :exception=\>#\, :backtrace=\>["C:/Users/BEKRISO/KIBANA7.0.1/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-mutate-3.4.0/lib/logstash/filters/mutate.rb:219:in `block in register'", "org/jruby/RubyHash.java:1419:in`each'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-mutate-3.4.0/lib/logstash/filters/mutate.rb:217:in `register'", "org/logstash/config/ir/compiler/AbstractFilterDelegatorExt.java:56:in`register'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/java\_pipeline.rb:191:in `block in register_plugins'", "org/jruby/RubyArray.java:1792:in`each'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/java\_pipeline.rb:190:in `register_plugins'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/java_pipeline.rb:446:in`maybe\_setup\_out\_plugins'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/java\_pipeline.rb:203:in `start_workers'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/java_pipeline.rb:145:in`run'", "C:/Users/BEKRISO/KIBANA7.0.1/logstash/logstash-core/lib/logstash/java\_pipeline.rb:104:in `block in start'"], :thread=\>"#\"} [2019-05-31T17:11:25,327][INFO][logstash.outputs.elasticsearch] Index Lifecycle Management is set to 'auto', but will be disabled - Index Lifecycle management is not installed on your Elasticsearch cluster [2019-05-31T17:11:25,327][INFO][logstash.outputs.elasticsearch] Attempting to install template {:manage\_template=\>{"index\_patterns"=\>"logstash-_", "version"=\>60001, "settings"=\>{"index.refresh\_interval"=\>"5s", "number\_of\_shards"=\>1}, "mappings"=\>{"dynamic\_templates"=\>[{"message\_field"=\>{"path\_match"=\>"message", "match\_mapping\_type"=\>"string", "mapping"=\>{"type"=\>"text", "norms"=\>false}}}, {"string\_fields"=\>{"match"=\>"_", "match\_mapping\_type"=\>"string", "mapping"=\>{"type"=\>"text", "norms"=\>false, "fields"=\>{"keyword"=\>{"type"=\>"keyword", "ignore\_above"=\>256}}}}}], "properties"=\>{"@timestamp"=\>{"type"=\>"date"}, "@version"=\>{"type"=\>"keyword"}, "geoip"=\>{"dynamic"=\>true, "properties"=\>{"ip"=\>{"type"=\>"ip"}, "location"=\>{"type"=\>"geo\_point"}, "latitude"=\>{"type"=\>"half\_float"}, "longitude"=\>{"type"=\>"half\_float"}}}}}}} [2019-05-31T17:11:25,359][ERROR][logstash.agent] Failed to execute action {:id=\>:main, :action\_type=\>LogStash::ConvergeResult::FailedAction, :message=\>"Could not execute action: PipelineAction::Create, action\_result: false", :backtrace=\>nil} ---
### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger) #### Post date: [May 31, 2019, 3:37pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-message/183364/8 "2019-05-31T15:37:54Z")
> [@soufiane1](#): > > "Usage cache" =\> "sring" That should be string, not sring. ---
### Author: ![soufiane1](https://avatars.discourse-cdn.com/v4/letter/s/dfb087/32.png) [@soufiane1](https://discuss.elastic.co/u/soufiane1) #### Post date: [May 31, 2019, 3:51pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-message/183364/9 "2019-05-31T15:51:31Z")
the problem is solved, thank you so much ---
### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system) #### Post date: [June 28, 2019, 3:51pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-message/183364/10 "2019-06-28T15:51:44Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.