# Logstash error

**URL:** <https://discuss.elastic.co/t/logstash-error/262558>\
**Category:** Logstash\
**Created:** [January 28, 2021, 7:57pm UTC](https://discuss.elastic.co/t/logstash-error/262558 "2021-01-28T19:57:32Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![suraj.ghorp](https://avatars.discourse-cdn.com/v4/letter/s/eada6e/32.png) [@suraj.ghorp](https://discuss.elastic.co/u/suraj.ghorp)\
**Post date:** [January 28, 2021, 7:57pm UTC](https://discuss.elastic.co/t/logstash-error/262558/1 "2021-01-28T19:57:32Z")

</div>

Hi Masters,

I am pulling logs from cloud based WAF through logstash. i am getting an below error.

WARNING: An illegal reflective access operation has occurred  
WARNING: Illegal reflective access by org.jruby.ext.openssl.SecurityHelper (file:/C:/Users/9GHORP~1/AppData/Local/Temp/jruby-20620/jruby14413321087602442180jopenssl.jar) to field java.security.MessageDigest.provider  
WARNING: Please consider reporting this to the maintainers of org.jruby.ext.openssl.SecurityHelper  
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations  
WARNING: All illegal access operations will be denied in a future release  
Sending Logstash logs to C:/Users/9ghorpades/Downloads/logstash-7.10.2-windows-x86\_64/logstash-7.10.2/logs which is now configured via log4j2.properties  
[2021-01-29T01:12:49,743][INFO][logstash.runner] Starting Logstash {"logstash.version"=\>"7.10.2", "jruby.version"=\>"jruby 9.2.13.0 (2.5.7) 2020-08-03 9a89c94bcc OpenJDK 64-Bit Server VM 11.0.8+10 on 11.0.8+10 +indy +jit [mswin32-x86\_64]"}  
[2021-01-29T01:12:50,310][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified  
[2021-01-29T01:12:51,691][INFO][logstash.config.source.local.configpathloader] No config files found in path {:path=\>"C:/Users/9ghorpades/Downloads/logstash-7.10.2-windows-x86\_64/logstash-7.10.2/bin/SIEM\_CONFIG"}  
[2021-01-29T01:12:51,742][ERROR][logstash.config.sourceloader] No configuration found in the configured sources.  
[2021-01-29T01:12:52,642][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600}  
[2021-01-29T01:12:57,337][INFO][logstash.runner] Logstash shut down.  
[2021-01-29T01:12:57,427][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [January 28, 2021, 8:13pm UTC](https://discuss.elastic.co/t/logstash-error/262558/2 "2021-01-28T20:13:18Z")

</div>

> [@suraj.ghorp](#):
>
> No config files found in path {:path=\>"C:/Users/9ghorpades/Downloads/logstash-7.10.2-windows-x86\_64/logstash-7.10.2/bin/SIEM\_CONFIG"}

You told logstash to look there for its configuration and it is not finding it. Is SIEM\_CONFIG a file or a directory? Are you sure the user running logstash has read access to it?

---

<div class="post-metadata">

**Author:** ![suraj.ghorp](https://avatars.discourse-cdn.com/v4/letter/s/eada6e/32.png) [@suraj.ghorp](https://discuss.elastic.co/u/suraj.ghorp)\
**Post date:** [February 1, 2021, 4:57pm UTC](https://discuss.elastic.co/t/logstash-error/262558/3 "2021-02-01T16:57:49Z")

</div>

Hi

logstash able to pull the logs from cloud based WAF, now i wanted to forward the logs to SSIM forwarder Ip, so i modify the config file.

output {  
file {  
path =\> "C:\Users\Downloads\logstash-7.10.2-windows-x86\_64\logstash-7.10.2\bin"  
codec =\> "line"  
type =\> "syslog"   
hosts =\> [**.**. **.** :10523"]  
After that i am getting below error.

java.base/java.lang.Thread.run(Thread.java:834)"]}  
warning: thread "Converge PipelineAction::Create" terminated with exception (report\_on\_exception is true):  
LogStash::Error: Don't know how to handle `Java::JavaLang::IllegalStateException` for `PipelineAction::Create<main>`  
create at org/logstash/execution/ConvergeResultExt.java:129  
add at org/logstash/execution/ConvergeResultExt.java:57  
converge\_state at C:/Users/Downloads/logstash-7.10.2-windows-x86\_64/logstash-7.10.2/logstash-core/lib/logstash/agent.rb:378  
[2021-02-01T21:25:53,308][ERROR][logstash.agent] An exception happened when converging configuration {:exception=\>LogStash::Error, :message=\>"Don't know how to handle `Java::JavaLang::IllegalStateException` for `PipelineAction::Create<main>`"}  
[2021-02-01T21:25:53,500][FATAL][logstash.runner] An unexpected error occurred! {:error=\>#\<LogStash::Error: Don't know how to handle `Java::JavaLang::IllegalStateException` for `PipelineAction::Create<main>`\>, :backtrace=\>["org/logstash/execution/ConvergeResultExt.java:129:in `create'", "org/logstash/execution/ConvergeResultExt.java:57:in `add'", "C:/Users/Downloads/logstash-7.10.2-windows-x86\_64/logstash-7.10.2/logstash-core/lib/logstash/agent.rb:378:in `block in converge\_state'"]}  
[2021-02-01T21:25:53,623][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit

Can you please help.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 1, 2021, 4:58pm UTC](https://discuss.elastic.co/t/logstash-error/262558/4 "2021-03-01T16:58:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
