# Logstash - Elastic App Search Error

**URL:** <https://discuss.elastic.co/t/logstash-elastic-app-search-error/251937>\
**Category:** Logstash\
**Tags:** windows\
**Created:** [October 13, 2020, 4:23pm UTC](https://discuss.elastic.co/t/logstash-elastic-app-search-error/251937 "2020-10-13T16:23:13Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tam2](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tam2/32/68143_2.png) [@Tam2](https://discuss.elastic.co/u/Tam2)\
**Post date:** [October 13, 2020, 4:23pm UTC](https://discuss.elastic.co/t/logstash-elastic-app-search-error/251937/1 "2020-10-13T16:23:14Z")

</div>

Running logstash with the elastic\_app\_search output throws an error

My config file looks like this:

```auto
    input {
      jdbc {
    jdbc_connection_string => "jdbc:sqlserver://XXXXX:1433;databaseName=XXXX;user=XXXX;password=XXXXX"
    jdbc_driver_class => "com.microsoft.sqlserver.jdbc.SQLServerDriver"
    jdbc_user => "XXXX"
    statement => "SELECT * FROM XXX"
      }
    }

    output { 
      elastic_app_search {
    engine => "12"
    host => "https://XXXXX.ent-search.eu-west-2.aws.cloud.es.io"
    api_key => "private-XXXXXX"
      }
    }

```

However when running i get the following in the output:

```auto
    [2020-10-13T17:19:58,118][INFO][logstash.runner] Starting Logstash {"logstash.version"=>"7.9.2", "jruby.version"=>"jruby 9.2.13.0 (2.5.7) 2020-08-03 9a89c94bcc Java HotSpot(TM) Client VM 25.261-b12 on 1.8.0_261-b12 +indy +jit [mswin32-i386]"}
    [2020-10-13T17:19:58,398][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
    [2020-10-13T17:19:59,853][INFO][org.reflections.Reflections] Reflections took 62 ms to scan 1 urls, producing 22 keys and 45 values 
    [2020-10-13T17:20:03,969][ERROR][logstash.agent] Failed to execute action {:id=>:main, :action_type=>LogStash::ConvergeResult::FailedAction, :message=>"Could not execute action: PipelineAction::Create<main>, action_result: false", :backtrace=>nil}
    [2020-10-13T17:20:04,786][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=>9600}
    [2020-10-13T17:20:09,490][INFO][logstash.runner] Logstash shut down.
    [2020-10-13T17:20:09,516][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit

```

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [October 13, 2020, 4:24pm UTC](https://discuss.elastic.co/t/logstash-elastic-app-search-error/251937/2 "2020-10-13T16:24:45Z")

</div>

Enable log.level debug and see if you get a more informative error message.

---

<div class="post-metadata">

**Author:** ![Tam2](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tam2/32/68143_2.png) [@Tam2](https://discuss.elastic.co/u/Tam2)\
**Post date:** [October 13, 2020, 4:46pm UTC](https://discuss.elastic.co/t/logstash-elastic-app-search-error/251937/3 "2020-10-13T16:46:06Z")

</div>

Additional Error from DEBUG  
Looks like it's trying to connect to **[XXXXX.ent-search.eu-west-2.aws.cloud.es.io.api.swiftype.com](http://XXXXX.ent-search.eu-west-2.aws.cloud.es.io.api.swiftype.com)** instead of **[XXXXX.ent-search.eu-west-2.aws.cloud.es.io](http://XXXXX.ent-search.eu-west-2.aws.cloud.es.io)**

```auto
[2020-10-13T17:47:33,188][DEBUG][logstash.javapipeline] Starting pipeline {:pipeline_id=>"main"}
[2020-10-13T17:47:34,507][DEBUG][logstash.javapipeline][main] Pipeline terminated by worker error {:pipeline_id=>"main", :exception=>#<LogStash::ConfigurationError: Failed to connect to App Search. hostname "XXXXX.ent-search.eu-west-2.aws.cloud.es.io.api.swiftype.com" does not match the server certificate>, :backtrace=>["C:/logstash-7.9.2/vendor/bundle/jruby/2.5.0/gems/logstash-output-elastic_app_search-1.1.1/lib/logstash/outputs/elastic_app_search.rb:36:in `register'", "org/logstash/config/ir/compiler/OutputStrategyExt.java:126:in `register'", "org/logstash/config/ir/compiler/AbstractOutputDelegatorExt.java:68:in `register'", "C:/logstash-7.9.2/logstash-core/lib/logstash/java_pipeline.rb:226:in `block in register_plugins'", "org/jruby/RubyArray.java:1809:in `each'", "C:/logstash-7.9.2/logstash-core/lib/logstash/java_pipeline.rb:225:in `register_plugins'", "C:/logstash-7.9.2/logstash-core/lib/logstash/java_pipeline.rb:559:in `maybe_setup_out_plugins'", "C:/logstash-7.9.2/logstash-core/lib/logstash/java_pipeline.rb:238:in `start_workers'", "C:/logstash-7.9.2/logstash-core/lib/logstash/java_pipeline.rb:183:in `run'", "C:/logstash-7.9.2/logstash-core/lib/logstash/java_pipeline.rb:134:in `block in start'"], "pipeline.sources"=>["C:/logstash-7.9.2/config/sql.conf"], :thread=>"#<Thread:0xee4f2e run>"}
[2020-10-13T17:47:34,537][ERROR][logstash.agent] Failed to execute action {:id=>:main, :action_type=>LogStash::ConvergeResult::FailedAction, :message=>"Could not execute action: PipelineAction::Create<main>, action_result: false", :backtrace=>nil}

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 10, 2020, 4:46pm UTC](https://discuss.elastic.co/t/logstash-elastic-app-search-error/251937/4 "2020-11-10T16:46:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.