Logstash Error

Mudit_Tripathi · October 22, 2021, 6:16am

Hi Guys,

I have created a sample csv file with 3 columns and I am using to log the csv file into Elasticsearch using logstash.

This is my logstash.conf

input {
file {
path => "/Users/mudit.tripathi/Downloads/samplelogs.csv"
start_position => "beginning"
sincedb_path => "/dev/null"
}
}
filter {
csv {
seperator => ","
columns => [“Name”,”Tag”,”Status”]
}
}
output {
Elasticsearch {
hosts => "https://localhost:9200"
index => "samplesnapit_2021"
}
stdout {}
}

I am using this command to run logstash -f logstash.conf

here is the error I am getting:

Using JAVA_HOME defined java: /Library/Java/JavaVirtualMachines/jdk-17.jdk/Contents/Home
WARNING, using JAVA_HOME while Logstash distribution comes with a bundled JDK
2021-10-22T11:39:55.765+05:30 [main] WARN FilenoUtil : Native subprocess control requires open access to the JDK IO subsystem
Pass '--add-opens java.base/sun.nio.ch=ALL-UNNAMED --add-opens java.base/java.io=ALL-UNNAMED' to enable.
Sending Logstash logs to /usr/local/Cellar/logstash-full/7.15.1/libexec/logs which is now configured via log4j2.properties
[2021-10-22T11:40:05,591][INFO ][logstash.runner ] Log4j configuration path used is: /usr/local/Cellar/logstash-full/7.15.1/libexec/config/log4j2.properties
[2021-10-22T11:40:05,597][INFO ][logstash.runner ] Starting Logstash {"logstash.version"=>"7.15.1", "jruby.version"=>"jruby 9.2.19.0 (2.5.8) 2021-06-15 55810c552b Java HotSpot(TM) 64-Bit Server VM 17+35-LTS-2724 on 17+35-LTS-2724 +indy +jit [darwin-x86_64]"}
[2021-10-22T11:40:05,657][WARN ][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
[2021-10-22T11:40:06,385][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
[2021-10-22T11:40:06,489][ERROR][logstash.agent ] Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:main, :exception=>"LogStash::ConfigurationError", :message=>"Expected one of [ \t\r\n], "#", [A-Za-z0-9_-], '"', "'", [A-Za-z_], "-", [0-9], "[", "{", "]" at line 12, column 21 (byte 232) after filter {\n csv {\n seperator => ","\n columns => [", :backtrace=>["/usr/local/Cellar/logstash-full/7.15.1/libexec/logstash-core/lib/logstash/compiler.rb:32:in compile_imperative'", "org/logstash/execution/AbstractPipelineExt.java:187:in initialize'", "org/logstash/execution/JavaBasePipelineExt.java:72:in initialize'", "/usr/local/Cellar/logstash-full/7.15.1/libexec/logstash-core/lib/logstash/java_pipeline.rb:47:in initialize'", "/usr/local/Cellar/logstash-full/7.15.1/libexec/logstash-core/lib/logstash/pipeline_action/create.rb:52:in execute'", "/usr/local/Cellar/logstash-full/7.15.1/libexec/logstash-core/lib/logstash/agent.rb:391:in block in converge_state'"]}
[2021-10-22T11:40:06,539][INFO ][logstash.runner ] Logstash shut down.
[2021-10-22T11:40:06,546][FATAL][org.logstash.Logstash ] Logstash stopped processing because of an error: (SystemExit) exit
org.jruby.exceptions.SystemExit: (SystemExit) exit
at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:747) ~[jruby-complete-9.2.19.0.jar:?]
at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:710) ~[jruby-complete-9.2.19.0.jar:?]
at usr.local.Cellar.logstash_minus_full.$7_dot_15_dot_1.libexec.lib.bootstrap.environment.(/usr/local/Cellar/logstash-full/7.15.1/libexec/lib/bootstrap/environment.rb:94) ~[?:?]

grumo35 · October 22, 2021, 7:40am

Hi,

When selecting your configuration i stumble upon the fact that you are using strange double quotes for the columns i believe you copy pasted the code from some sort of text document.

input {

file {

path => "/Users/mudit.tripathi/Downloads/samplelogs.csv"

start_position => "beginning"

sincedb_path => "/dev/null"

}

}

filter {

csv {

seperator => ","

columns => ["Name","Tag","Status"]

}

}

output {

Elasticsearch {

hosts => "https://localhost:9200"

index => "samplesnapit_2021"

}

stdout {}

}

The " and the ” are different, that's what might cause the issue here.

Mudit_Tripathi · October 22, 2021, 8:23am

Hi thanks for looking into it. I copied it from pycharm, not sure how this strange comma came. I have changed it. thanks.

input {
file {
path => "/Users/mudit.tripathi/Downloads/samplelogs.csv"
start_position => "beginning"
sincedb_path => "/dev/null"
}
}
filter {
csv {
seperator => ","
columns => ["Name","Tag","Status"]
}
}
output {
Elasticsearch {
hosts => "https://localhost:9200"
index => "samplesnapit_2021"
}
stdout {}
}

Now I am getting different error

ERROR
[2021-10-22T13:51:50,693][INFO ][logstash.runner ] Log4j configuration path used is: /usr/local/Cellar/logstash-full/7.15.1/libexec/config/log4j2.properties
[2021-10-22T13:51:50,700][INFO ][logstash.runner ] Starting Logstash {"logstash.version"=>"7.15.1", "jruby.version"=>"jruby 9.2.19.0 (2.5.8) 2021-06-15 55810c552b Java HotSpot(TM) 64-Bit Server VM 17+35-LTS-2724 on 17+35-LTS-2724 +indy +jit [darwin-x86_64]"}
[2021-10-22T13:51:50,772][WARN ][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
[2021-10-22T13:51:50,780][FATAL][logstash.runner ] Logstash could not be started because there is already another instance using the configured data directory. If you wish to run multiple instances, you must change the "path.data" setting.
[2021-10-22T13:51:50,782][FATAL][org.logstash.Logstash ] Logstash stopped processing because of an error: (SystemExit) exit
org.jruby.exceptions.SystemExit: (SystemExit) exit
at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:747) ~[jruby-complete-9.2.19.0.jar:?]
at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:710) ~[jruby-complete-9.2.19.0.jar:?]
at usr.local.Cellar.logstash_minus_full.$7_dot_15_dot_1.libexec.lib.bootstrap.environment.(/usr/local/Cellar/logstash-full/7.15.1/libexec/lib/bootstrap/environment.rb:94) ~[?:?]
PP-C02Z66G1LVCG:logstash-full mudit.tripathi$ logstash -f logstash.conf
Using JAVA_HOME defined java: /Library/Java/JavaVirtualMachines/jdk-17.jdk/Contents/Home
WARNING, using JAVA_HOME while Logstash distribution comes with a bundled JDK
2021-10-22T13:52:18.032+05:30 [main] WARN FilenoUtil : Native subprocess control requires open access to the JDK IO subsystem
Pass '--add-opens java.base/sun.nio.ch=ALL-UNNAMED --add-opens java.base/java.io=ALL-UNNAMED' to enable.
Sending Logstash logs to /usr/local/Cellar/logstash-full/7.15.1/libexec/logs which is now configured via log4j2.properties
[2021-10-22T13:52:27,652][INFO ][logstash.runner ] Log4j configuration path used is: /usr/local/Cellar/logstash-full/7.15.1/libexec/config/log4j2.properties
[2021-10-22T13:52:27,657][INFO ][logstash.runner ] Starting Logstash {"logstash.version"=>"7.15.1", "jruby.version"=>"jruby 9.2.19.0 (2.5.8) 2021-06-15 55810c552b Java HotSpot(TM) 64-Bit Server VM 17+35-LTS-2724 on 17+35-LTS-2724 +indy +jit [darwin-x86_64]"}
[2021-10-22T13:52:27,703][WARN ][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
[2021-10-22T13:52:28,455][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
[2021-10-22T13:52:28,758][INFO ][org.reflections.Reflections] Reflections took 62 ms to scan 1 urls, producing 120 keys and 417 values
[2021-10-22T13:52:29,164][ERROR][logstash.filters.csv ] Unknown setting 'seperator' for csv
[2021-10-22T13:52:29,168][ERROR][logstash.agent ] Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:main, :exception=>"Java::JavaLang::IllegalStateException", :message=>"Unable to configure plugins: (ConfigurationError) Something is wrong with your configuration.", :backtrace=>["org.logstash.config.ir.CompiledPipeline.(CompiledPipeline.java:119)", "org.logstash.execution.JavaBasePipelineExt.initialize(JavaBasePipelineExt.java:86)", "org.logstash.execution.JavaBasePipelineExt$INVOKER$i$1$0$initialize.call(JavaBasePipelineExt$INVOKER$i$1$0$initialize.gen)", "org.jruby.internal.runtime.methods.JavaMethod$JavaMethodN.call(JavaMethod.java:837)", "org.jruby.ir.runtime.IRRuntimeHelpers.instanceSuper(IRRuntimeHelpers.java:1169)", "org.jruby.ir.runtime.IRRuntimeHelpers.instanceSuperSplatArgs(IRRuntimeHelpers.java:1156)", "org.jruby.ir.targets.InstanceSuperInvokeSite.invoke(InstanceSuperInvokeSite.java:39)", "usr.local.Cellar.logstash_minus_full.$7_dot_15_dot_1.libexec.logstash_minus_core.lib.logstash.java_pipeline.RUBY$method$initialize$0(/usr/local/Cellar/logstash-full/7.15.1/libexec/logstash-core/lib/logstash/java_pipeline.rb:47)", "org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:80)", "org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:70)", "org.jruby.runtime.callsite.CachingCallSite.cacheAndCall(CachingCallSite.java:333)", "org.jruby.runtime.callsite.CachingCallSite.call(CachingCallSite.java:87)", "org.jruby.RubyClass.newInstance(RubyClass.java:939)", "org.jruby.RubyClass$INVOKER$i$newInstance.call(RubyClass$INVOKER$i$newInstance.gen)", "org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:207)", "usr.local.Cellar.logstash_minus_full.$7_dot_15_dot_1.libexec.logstash_minus_core.lib.logstash.pipeline_action.create.RUBY$method$execute$0(/usr/local/Cellar/logstash-full/7.15.1/libexec/logstash-core/lib/logstash/pipeline_action/create.rb:52)", "usr.local.Cellar.logstash_minus_full.$7_dot_15_dot_1.libexec.logstash_minus_core.lib.logstash.pipeline_action.create.RUBY$method$execute$0$VARARGS(/usr/local/Cellar/logstash-full/7.15.1/libexec/logstash-core/lib/logstash/pipeline_action/create.rb)", "org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:80)", "org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:70)", "org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:207)", "usr.local.Cellar.logstash_minus_full.$7_dot_15_dot_1.libexec.logstash_minus_core.lib.logstash.agent.RUBY$block$converge_state$2(/usr/local/Cellar/logstash-full/7.15.1/libexec/logstash-core/lib/logstash/agent.rb:391)", "org.jruby.runtime.CompiledIRBlockBody.callDirect(CompiledIRBlockBody.java:138)", "org.jruby.runtime.IRBlockBody.call(IRBlockBody.java:58)", "org.jruby.runtime.IRBlockBody.call(IRBlockBody.java:52)", "org.jruby.runtime.Block.call(Block.java:139)", "org.jruby.RubyProc.call(RubyProc.java:318)", "org.jruby.internal.runtime.RubyRunnable.run(RubyRunnable.java:105)", "java.base/java.lang.Thread.run(Thread.java:833)"]}
warning: thread "Converge PipelineAction::Create" terminated with exception (report_on_exception is true):
LogStash::Error: Don't know how to handle Java::JavaLang::IllegalStateException for PipelineAction::Create<main>
create at org/logstash/execution/ConvergeResultExt.java:135
add at org/logstash/execution/ConvergeResultExt.java:60
converge_state at /usr/local/Cellar/logstash-full/7.15.1/libexec/logstash-core/lib/logstash/agent.rb:404
[2021-10-22T13:52:29,171][ERROR][logstash.agent ] An exception happened when converging configuration {:exception=>LogStash::Error, :message=>"Don't know how to handle Java::JavaLang::IllegalStateException for PipelineAction::Create<main>"}
[2021-10-22T13:52:29,175][FATAL][logstash.runner ] An unexpected error occurred! {:error=>#<LogStash::Error: Don't know how to handle Java::JavaLang::IllegalStateException for PipelineAction::Create<main>>, :backtrace=>["org/logstash/execution/ConvergeResultExt.java:135:in create'", "org/logstash/execution/ConvergeResultExt.java:60:in add'", "/usr/local/Cellar/logstash-full/7.15.1/libexec/logstash-core/lib/logstash/agent.rb:404:in `block in converge_state'"]}
[2021-10-22T13:52:29,180][FATAL][org.logstash.Logstash ] Logstash stopped processing because of an error: (SystemExit) exit
org.jruby.exceptions.SystemExit: (SystemExit) exit
at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:747) ~[jruby-complete-9.2.19.0.jar:?]
at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:710) ~[jruby-complete-9.2.19.0.jar:?]
at usr.local.Cellar.logstash_minus_full.$7_dot_15_dot_1.libexec.lib.bootstrap.environment.(/usr/local/Cellar/logstash-full/7.15.1/libexec/lib/bootstrap/environment.rb:94) ~[?:?]

grumo35 · October 22, 2021, 2:02pm

Please change seperator to separator

Mudit_Tripathi · October 25, 2021, 5:03am

ok. it ran this time i got SSL error. I fixed it. by using http instead of https.
now the pipeline ran but there were errors.

[2021-10-25T10:37:25,454][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
[2021-10-25T10:37:25,746][INFO ][org.reflections.Reflections] Reflections took 51 ms to scan 1 urls, producing 120 keys and 417 values
[2021-10-25T10:37:26,271][INFO ][logstash.outputs.Elasticsearch][main] New Elasticsearch output {:class=>"LogStash::Outputs::Elasticsearch", :hosts=>["http://localhost:9200"]}
[2021-10-25T10:37:26,424][INFO ][logstash.outputs.Elasticsearch][main] Elasticsearch pool URLs updated {:changes=>{:removed=>, :added=>[http://localhost:9200/]}}
[2021-10-25T10:37:26,496][WARN ][logstash.outputs.Elasticsearch][main] Restored connection to ES instance {:url=>"http://localhost:9200/"}
[2021-10-25T10:37:26,532][INFO ][logstash.outputs.Elasticsearch][main] Elasticsearch version determined (7.10.2-SNAPSHOT) {:es_version=>7}
[2021-10-25T10:37:26,533][WARN ][logstash.outputs.Elasticsearch][main] Detected a 6.x and above cluster: the type event field won't be used to determine the document _type {:es_version=>7}
[2021-10-25T10:37:26,549][ERROR][logstash.outputs.Elasticsearch][main] Unable to get license information {:url=>"http://localhost:9200/", :exception=>LogStash::Outputs::Elasticsearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '400' contacting Elasticsearch at URL 'http://localhost:9200/_license'"}
[2021-10-25T10:37:26,552][ERROR][logstash.outputs.Elasticsearch][main] Could not connect to a compatible version of Elasticsearch {:url=>"http://localhost:9200/"}
[2021-10-25T10:37:26,634][INFO ][logstash.javapipeline ][main] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>16, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>2000, "pipeline.sources"=>["/usr/local/Cellar/logstash-full/logstash.conf"], :thread=>"#<Thread:0x7cd72b6 run>"}
[2021-10-25T10:37:27,252][INFO ][logstash.javapipeline ][main] Pipeline Java execution initialization time {"seconds"=>0.62}
[2021-10-25T10:37:27,286][INFO ][logstash.javapipeline ][main] Pipeline started {"pipeline.id"=>"main"}
[2021-10-25T10:37:27,305][INFO ][filewatch.observingtail ][main][008b12e652d9ef75bf481081144f95a9a9a2b8d261d279d5f05dd9be8c2ff69d] START, creating Discoverer, Watch with file and sincedb collections
[2021-10-25T10:37:27,319][INFO ][logstash.agent ] Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>}
[2021-10-25T10:37:27,324][ERROR][logstash.javapipeline ][main][008b12e652d9ef75bf481081144f95a9a9a2b8d261d279d5f05dd9be8c2ff69d] A plugin had an unrecoverable error. Will restart this plugin.
Pipeline_id:main
Plugin: <LogStash::Inputs::File start_position=>"beginning", path=>["/Users/mudit.tripathi/Downloads/samplelogs.csv"], id=>"008b12e652d9ef75bf481081144f95a9a9a2b8d261d279d5f05dd9be8c2ff69d", sincedb_path=>"/dev/null", enable_metric=>true, codec=><LogStash::Codecs::Plain id=>"plain_86dad06b-da15-48c8-b282-1db920dcd487", enable_metric=>true, charset=>"UTF-8">, stat_interval=>1.0, discover_interval=>15, sincedb_write_interval=>15.0, delimiter=>"\n", close_older=>3600.0, mode=>"tail", file_completed_action=>"delete", sincedb_clean_after=>1209600.0, file_chunk_size=>32768, file_chunk_count=>140737488355327, file_sort_by=>"last_modified", file_sort_direction=>"asc", exit_after_read=>false, check_archive_validity=>false>
Error: Permission denied - Permission denied
Exception: Errno::EACCES
Stack: org/jruby/RubyFile.java:1267:in utime' uri:classloader:/META-INF/jruby.home/lib/ruby/stdlib/fileutils.rb:1133:in block in touch'
org/jruby/RubyArray.java:1820:in each' uri:classloader:/META-INF/jruby.home/lib/ruby/stdlib/fileutils.rb:1130:in touch'
/usr/local/Cellar/logstash-full/7.15.1/libexec/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.4.0/lib/filewatch/sincedb_collection.rb:22:in initialize' /usr/local/Cellar/logstash-full/7.15.1/libexec/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.4.0/lib/filewatch/observing_base.rb:62:in build_watch_and_dependencies'
/usr/local/Cellar/logstash-full/7.15.1/libexec/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.4.0/lib/filewatch/observing_base.rb:56:in initialize' /usr/local/Cellar/logstash-full/7.15.1/libexec/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.4.0/lib/logstash/inputs/file.rb:352:in start_processing'
/usr/local/Cellar/logstash-full/7.15.1/libexec/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.4.0/lib/logstash/inputs/file.rb:368:in run' /usr/local/Cellar/logstash-full/7.15.1/libexec/logstash-core/lib/logstash/java_pipeline.rb:405:in inputworker'
/usr/local/Cellar/logstash-full/7.15.1/libexec/logstash-core/lib/logstash/java_pipeline.rb:396:in block in start_input' [2021-10-25T10:37:28,338][INFO ][filewatch.observingtail ][main][008b12e652d9ef75bf481081144f95a9a9a2b8d261d279d5f05dd9be8c2ff69d] START, creating Discoverer, Watch with file and sincedb collections [2021-10-25T10:37:28,340][ERROR][logstash.javapipeline ][main][008b12e652d9ef75bf481081144f95a9a9a2b8d261d279d5f05dd9be8c2ff69d] A plugin had an unrecoverable error. Will restart this plugin. Pipeline_id:main Plugin: <LogStash::Inputs::File start_position=>"beginning", path=>["/Users/mudit.tripathi/Downloads/samplelogs.csv"], id=>"008b12e652d9ef75bf481081144f95a9a9a2b8d261d279d5f05dd9be8c2ff69d", sincedb_path=>"/dev/null", enable_metric=>true, codec=><LogStash::Codecs::Plain id=>"plain_86dad06b-da15-48c8-b282-1db920dcd487", enable_metric=>true, charset=>"UTF-8">, stat_interval=>1.0, discover_interval=>15, sincedb_write_interval=>15.0, delimiter=>"\n", close_older=>3600.0, mode=>"tail", file_completed_action=>"delete", sincedb_clean_after=>1209600.0, file_chunk_size=>32768, file_chunk_count=>140737488355327, file_sort_by=>"last_modified", file_sort_direction=>"asc", exit_after_read=>false, check_archive_validity=>false> Error: Permission denied - Permission denied Exception: Errno::EACCES Stack: org/jruby/RubyFile.java:1267:in utime'
uri:classloader:/META-INF/jruby.home/lib/ruby/stdlib/fileutils.rb:1133:in block in touch' org/jruby/RubyArray.java:1820:in each'
uri:classloader:/META-INF/jruby.home/lib/ruby/stdlib/fileutils.rb:1130:in touch' /usr/local/Cellar/logstash-full/7.15.1/libexec/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.4.0/lib/filewatch/sincedb_collection.rb:22:in initialize'
/usr/local/Cellar/logstash-full/7.15.1/libexec/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.4.0/lib/filewatch/observing_base.rb:62:in build_watch_and_dependencies' /usr/local/Cellar/logstash-full/7.15.1/libexec/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.4.0/lib/filewatch/observing_base.rb:56:in initialize'
/usr/local/Cellar/logstash-full/7.15.1/libexec/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.4.0/lib/logstash/inputs/file.rb:352:in start_processing' /usr/local/Cellar/logstash-full/7.15.1/libexec/vendor/bundle/jruby/2.5.0/gems/logstash-input-file-4.4.0/lib/logstash/inputs/file.rb:368:in run'
/usr/local/Cellar/logstash-full/7.15.1/libexec/logstash-core/lib/logstash/java_pipeline.rb:405:in inputworker' /usr/local/Cellar/logstash-full/7.15.1/libexec/logstash-core/lib/logstash/java_pipeline.rb:396:in block in start_input'
[2021-10-25T10:37:29,344][INFO ][filewatch.observingtail ][main][008b12e652d9ef75bf481081144f95a9a9a2b8d261d279d5f05dd9be8c2ff69d] START, creating Discoverer, Watch with file and sincedb collections
[2021-10-25T10:37:29,360][ERROR][logstash.javapipeline ][main][008b12e652d9ef75bf481081144f95a9a9a2b8d261d279d5f05dd9be8c2ff69d] A plugin had an unrecoverable error. Will restart this plugin.
Pipeline_id:main
Plugin: <LogStash::Inputs::File start_position=>"beginning", path=>["/Users/mudit.tripathi/Downloads/samplelogs.csv"], id=>"008b12e652d9ef75bf481081144f95a9a9a2b8d261d279d5f05dd9be8c2ff69d", sincedb_path=>"/dev/null", enable_metric=>true, codec=><LogStash::Codecs::Plain id=>"plain_86dad06b-da15-48c8-b282-1db920dcd487", enable_metric=>true, charset=>"UTF-8">, stat_interval=>1.0, discover_interval=>15, sincedb_write_interval=>15.0, delimiter=>"\n", close_older=>3600.0, mode=>"tail", file_completed_action=>"delete", sincedb_clean_after=>1209600.0, file_chunk_size=>32768, file_chunk_count=>140737488355327, file_sort_by=>"last_modified", file_sort_direction=>"asc", exit_after_read=>false, check_archive_validity=>false>
Error: Permission denied - Permission denied
Exception: Errno::EACCES
Stack: org/jruby/RubyFile.java:1267:in utime' uri:classloader:/META-INF/jruby.home/lib/ruby/stdlib/fileutils.rb:1133:in block in touch'
org/jruby/RubyArray.java:1820:in each' uri:classloader:/META-INF/jruby.home/lib/ruby/stdlib/fileutils.rb:1130:in touch'

this keeps on coming in logs.

Mudit_Tripathi · October 25, 2021, 9:22am

issue is fixed. many thanks to you sir!

system · November 22, 2021, 9:22am

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Problem with csv filter Logstash	7	401	June 24, 2020
Logstash error in config file Logstash	8	22892	December 30, 2017
Send csv to elasticsearch cloud error Logstash	1	434	December 5, 2018
Logstash not working fine Logstash	6	335	December 5, 2022
Parsing CSV file to Logstash and Elastic Search which is in the server Logstash	8	786	April 3, 2018

Logstash Error

Related topics