# Logstash Errors During Lab 4

**URL:** <https://discuss.elastic.co/t/logstash-errors-during-lab-4/106759>\
**Category:** Elastic Training\
**Created:** [November 7, 2017, 9:30pm UTC](https://discuss.elastic.co/t/logstash-errors-during-lab-4/106759 "2017-11-07T21:30:00Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![millerjasonklye](https://avatars.discourse-cdn.com/v4/letter/m/3d9bf3/32.png) [@millerjasonklye](https://discuss.elastic.co/u/millerjasonklye)\
**Post date:** [November 7, 2017, 9:30pm UTC](https://discuss.elastic.co/t/logstash-errors-during-lab-4/106759/1 "2017-11-07T21:30:00Z")

</div>

Hello,

My name is Jason Miller. I recently bought the Elastic Logging Training package. I am following along with the labs and got to the portion of starting Logstash this is the error I receieve within my terminal. I am running

I am not sure what this error is actually saying but would love some help in getting Logstash off the ground.

This is the file output of the logtash directory & the config folder.

? logstash-5.6.1 ls  
total 360  
drwxr-xr-x@ 17 jmiller staff 544B Sep 21 17:39 .  
drwxr-xr-x+ 15 jmiller staff 480B Oct 22 18:35 ..  
-rw-r--r--@ 1 jmiller staff 109K Sep 14 12:51 [CHANGELOG.md](http://CHANGELOG.md)  
-rw-r--r--@ 1 jmiller staff 2.2K Sep 14 12:51 CONTRIBUTORS  
-rw-r--r--@ 1 jmiller staff 4.0K Sep 14 12:55 Gemfile  
-rw-r--r--@ 1 jmiller staff 21K Sep 14 12:52 Gemfile.jruby-1.9.lock  
-rw-r--r--@ 1 jmiller staff 589B Sep 14 12:51 LICENSE  
-rw-r--r--@ 1 jmiller staff 29K Sep 14 12:55 NOTICE.TXT  
drwxr-xr-x@ 12 jmiller staff 384B Sep 21 17:39 bin  
drwxr-xr-x@ 6 jmiller staff 192B Sep 21 17:39 config  
drwxr-xr-x@ 2 jmiller staff 64B Sep 14 12:51 data  
drwxr-xr-x@ 5 jmiller staff 160B Sep 21 17:39 lib  
drwxr-xr-x@ 6 jmiller staff 192B Sep 21 17:39 logstash-core  
drwxr-xr-x@ 4 jmiller staff 128B Sep 21 17:39 logstash-core-plugin-api  
drwxr-xr-x@ 5 jmiller staff 160B Sep 21 17:39 modules  
drwxr-xr-x@ 3 jmiller staff 96B Sep 21 17:39 tools  
drwxr-xr-x@ 4 jmiller staff 128B Sep 21 17:39 vendor

? ELK Stack ls logstash\_configs  
total 32  
drwxr-xr-x@ 6 jmiller staff 192B Sep 22 16:53 .  
drwxr-xr-x+ 15 jmiller staff 480B Oct 22 18:35 ..  
-rw-r--r--@ 1 jmiller staff 82B Sep 22 16:53 bk\_logstash\_simple.conf  
-rw-r--r--@ 1 jmiller staff 744B Apr 21 2016 logstash\_elasticsearch.conf  
-rw-r--r--@ 1 jmiller staff 82B Apr 19 2016 logstash\_simple.conf  
-rw-r--r--@ 1 jmiller staff 639B Apr 20 2016 logstash\_stdout.conf

* * *

Error when trying to start logstash

? logstash-5.6.1 ./bin/logstash -f ../logstash\_configs/logstash\_simple.conf  
[FATAL] 2017-11-07 12:52:39.951 [main] runner - An unexpected error occurred! {:error=\>java.lang.IllegalArgumentException: Illegal character in path at index 34: file:////Users/jmiller/Desktop/ELK Stack/logstash-5.6.1/config/log4j2.properties, :backtrace=\>["java.net.URI.create(java/net/URI.java:852)", "java.lang.reflect.Method.invoke(java/lang/reflect/Method.java:498)", "RUBY.reconfigure(/Users/jmiller/Desktop/ELK Stack/logstash-5.6.1/logstash-core/lib/logstash/logging/logger.rb:78)", "org.jruby.ext.thread.Mutex.synchronize(org/jruby/ext/thread/Mutex.java:149)", "RUBY.reconfigure(/Users/jmiller/Desktop/ELK Stack/logstash-5.6.1/logstash-core/lib/logstash/logging/logger.rb:77)", "RUBY.execute(/Users/jmiller/Desktop/ELK Stack/logstash-5.6.1/logstash-core/lib/logstash/runner.rb:224)", "RUBY.run(/Users/jmiller/Desktop/ELK Stack/logstash-5.6.1/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:67)", "RUBY.run(/Users/jmiller/Desktop/ELK Stack/logstash-5.6.1/logstash-core/lib/logstash/runner.rb:204)", "RUBY.run(/Users/jmiller/Desktop/ELK Stack/logstash-5.6.1/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:132)", "Users.jmiller.Desktop.ELK\_20\_Stack.logstash\_minus\_5\_dot\_6\_dot\_1.lib.bootstrap.environment.(root)(/Users/jmiller/Desktop/ELK Stack/logstash-5.6.1/lib/bootstrap/environment.rb:71)", "Users.jmiller.Desktop.ELK\_20\_Stack.logstash\_minus\_5\_dot\_6\_dot\_1.lib.bootstrap.environment.(root)(Users/jmiller/Desktop/ELK\_20\_Stack/logstash\_minus\_5\_dot\_6\_dot\_1/lib/bootstrap//Users/jmiller/Desktop/ELK Stack/logstash-5.6.1/lib/bootstrap/environment.rb:71)"]}

---

<div class="post-metadata">

**Author:** ![nzamecnik](https://avatars.discourse-cdn.com/v4/letter/n/76d3ee/32.png) [@nzamecnik](https://discuss.elastic.co/u/nzamecnik)\
**Post date:** [November 7, 2017, 9:49pm UTC](https://discuss.elastic.co/t/logstash-errors-during-lab-4/106759/2 "2017-11-07T21:49:05Z")

</div>

Could you send the Logstash conf you're using?

Also, you might want to remove the space from your path. There is a space in "ELK Stack" in your path - that could be causing an issue.

---

<div class="post-metadata">

**Author:** ![millerjasonklye](https://avatars.discourse-cdn.com/v4/letter/m/3d9bf3/32.png) [@millerjasonklye](https://discuss.elastic.co/u/millerjasonklye)\
**Post date:** [November 7, 2017, 10:25pm UTC](https://discuss.elastic.co/t/logstash-errors-during-lab-4/106759/3 "2017-11-07T22:25:16Z")

</div>

Hey Nathan,

input {  
stdin {}  
}

filter {}

output {  
stdout {  
codec =\> rubydebug  
}  
}%

---

<div class="post-metadata">

**Author:** ![millerjasonklye](https://avatars.discourse-cdn.com/v4/letter/m/3d9bf3/32.png) [@millerjasonklye](https://discuss.elastic.co/u/millerjasonklye)\
**Post date:** [November 7, 2017, 11:00pm UTC](https://discuss.elastic.co/t/logstash-errors-during-lab-4/106759/4 "2017-11-07T23:00:01Z")

</div>

Hey Nathan,

Thank you for the help, I removed the spacke in ELK Stack, and it is what caused the problem. Appreciate the help!

---

<div class="post-metadata">

**Author:** ![nzamecnik](https://avatars.discourse-cdn.com/v4/letter/n/76d3ee/32.png) [@nzamecnik](https://discuss.elastic.co/u/nzamecnik)\
**Post date:** [November 8, 2017, 2:16pm UTC](https://discuss.elastic.co/t/logstash-errors-during-lab-4/106759/5 "2017-11-08T14:16:52Z")

</div>

Good to know - I mentioned it because I thought I'd seen that error before caused by that.

---

<div class="post-metadata">

**Author:** ![nzamecnik](https://avatars.discourse-cdn.com/v4/letter/n/76d3ee/32.png) [@nzamecnik](https://discuss.elastic.co/u/nzamecnik)\
**Post date:** [November 8, 2017, 2:17pm UTC](https://discuss.elastic.co/t/logstash-errors-during-lab-4/106759/6 "2017-11-08T14:17:05Z")

</div>


