# Logstash configuring error in windows

**URL:** <https://discuss.elastic.co/t/logstash-configuring-error-in-windows/232904>\
**Category:** Logstash\
**Created:** [May 16, 2020, 6:19am UTC](https://discuss.elastic.co/t/logstash-configuring-error-in-windows/232904 "2020-05-16T06:19:36Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Dv\_Thiyanesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dv_thiyanesh/32/53965_2.png) [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\
**Post date:** [May 16, 2020, 6:19am UTC](https://discuss.elastic.co/t/logstash-configuring-error-in-windows/232904/1 "2020-05-16T06:19:36Z")

</div>

Hi, I am using elk stack to fetch logs from client machine. i have done using these version elasticsearch- 6.5.3 logstash- 6.5.3 after 6 months Today for testing i just started watching logs running elasticseach and logstash. elasticsearch get started running when i configure logstash it shows this error:

F:\ELK(.exe file)\logstash-6.5.3\bin\>logstash -f demo-winlog-pipeline.conf  
Error: Could not find or load main class file)\logstash-6.5.3\logstash-core\lib\jars\animal-sniffer-annotations-1.14.jar;F:\ELK(.exe

What went wrong? anyone hep me fast

---

<div class="post-metadata">

**Author:** ![ptamba](https://avatars.discourse-cdn.com/v4/letter/p/7feea3/32.png) [@ptamba](https://discuss.elastic.co/u/ptamba)\
**Post date:** [May 16, 2020, 6:58am UTC](https://discuss.elastic.co/t/logstash-configuring-error-in-windows/232904/2 "2020-05-16T06:58:30Z")

</div>

> [@Dv\_Thiyanesh](#):
>
> Error: Could not find or load main class file)\logstash-6.5.3\logstash-core\lib\jars\animal-sniffer-annotations-1.14.jar;F:\ELK(.exe

based on this, i will first check whether said jar exists. it will help if you post your logstash config.

---

<div class="post-metadata">

**Author:** ![Dv\_Thiyanesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dv_thiyanesh/32/53965_2.png) [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\
**Post date:** [May 16, 2020, 7:02am UTC](https://discuss.elastic.co/t/logstash-configuring-error-in-windows/232904/3 "2020-05-16T07:02:33Z")

</div>

Before 6 months using this same bat file i configured it get works fine but today it shows error

```auto
input {
  beats {
    port => 5044
  }
}

filter {
  if [system][process] {
    if [system][process][cmdline] {
      grok {
        match => {
          "[system][process][cmdline]" => "^%{PATH:[system][process][cmdline_path]}"
        }
       
      }
    }
  }
}

output {
  elasticsearch {
    hosts => "localhost:9200"
    manage_template => false
    index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
  }
}

```

---

<div class="post-metadata">

**Author:** ![ptamba](https://avatars.discourse-cdn.com/v4/letter/p/7feea3/32.png) [@ptamba](https://discuss.elastic.co/u/ptamba)\
**Post date:** [May 16, 2020, 7:07am UTC](https://discuss.elastic.co/t/logstash-configuring-error-in-windows/232904/4 "2020-05-16T07:07:15Z")

</div>

> [@Dv\_Thiyanesh](#):
>
> animal-sniffer-annotations-1.14.jar

is this file exists? how do you rub logstash? you mentioned bat script, what does the script look like?

---

<div class="post-metadata">

**Author:** ![Dv\_Thiyanesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dv_thiyanesh/32/53965_2.png) [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\
**Post date:** [May 16, 2020, 7:11am UTC](https://discuss.elastic.co/t/logstash-configuring-error-in-windows/232904/5 "2020-05-16T07:11:03Z")

</div>

cannot unserstand? where i need to check jar is available or not?

---

<div class="post-metadata">

**Author:** ![ptamba](https://avatars.discourse-cdn.com/v4/letter/p/7feea3/32.png) [@ptamba](https://discuss.elastic.co/u/ptamba)\
**Post date:** [May 16, 2020, 7:16am UTC](https://discuss.elastic.co/t/logstash-configuring-error-in-windows/232904/6 "2020-05-16T07:16:39Z")

</div>

> [@Dv\_Thiyanesh](#):
>
> F:\ELK(.exe file)\logstash-6.5.3\bin\>logstash -f demo-winlog-pipeline.conf  
> Error: Could not find or load main class file)\logstash-6.5.3\logstash-core\lib\jars\animal-sniffer-annotations-1.14.jar;F:\ELK(.exe

this error indicated path issue. if you run it from bat script, try wrapping `F:\ELK(.exe file)\logstash-6.5.3\bin>logstash` inside a double quote. seems like there’s a space in your directory path

---

<div class="post-metadata">

**Author:** ![Dv\_Thiyanesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dv_thiyanesh/32/53965_2.png) [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\
**Post date:** [May 16, 2020, 7:30am UTC](https://discuss.elastic.co/t/logstash-configuring-error-in-windows/232904/7 "2020-05-16T07:30:15Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/a/f/af3693c22f145795ce42687e1a4dfa1ad86db589.png)

Now it started successfully because I changed the logstash directory

what is the reason it doesnot running on previous directory? any specific reason

---

<div class="post-metadata">

**Author:** ![Dv\_Thiyanesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dv_thiyanesh/32/53965_2.png) [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\
**Post date:** [May 16, 2020, 7:32am UTC](https://discuss.elastic.co/t/logstash-configuring-error-in-windows/232904/8 "2020-05-16T07:32:34Z")

</div>

> [@ptamba](#):
>
> inside a double quote. seems like there’s a space in your directory path

There is no space, I just use command prompt to navigate to that directory

---

<div class="post-metadata">

**Author:** ![ptamba](https://avatars.discourse-cdn.com/v4/letter/p/7feea3/32.png) [@ptamba](https://discuss.elastic.co/u/ptamba)\
**Post date:** [May 16, 2020, 9:07am UTC](https://discuss.elastic.co/t/logstash-configuring-error-in-windows/232904/9 "2020-05-16T09:07:40Z")

</div>

> [@ptamba](#):
>
> F:\ELK(.exe file)

the above line was in your previous error message. there is obviously space between .exe and file.

by navigating to bin directory and launch the logstash command, you eliminate the need to specify path.

---

<div class="post-metadata">

**Author:** ![Dv\_Thiyanesh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dv_thiyanesh/32/53965_2.png) [@Dv\_Thiyanesh](https://discuss.elastic.co/u/Dv_Thiyanesh)\
**Post date:** [May 16, 2020, 10:02am UTC](https://discuss.elastic.co/t/logstash-configuring-error-in-windows/232904/10 "2020-05-16T10:02:37Z")

</div>

okay thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 13, 2020, 10:02am UTC](https://discuss.elastic.co/t/logstash-configuring-error-in-windows/232904/11 "2020-06-13T10:02:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.