# Logstash - Filter - Error message(LogStash::ConfigurationError)

**URL:** https://discuss.elastic.co/t/logstash-filter-error-message-logstash-configurationerror/243307
**Category:** Logstash
**Created:** [July 31, 2020, 6:00am UTC](https://discuss.elastic.co/t/logstash-filter-error-message-logstash-configurationerror/243307 "2020-07-31T06:00:57Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![daemon](https://avatars.discourse-cdn.com/v4/letter/d/c6cbf5/32.png) [@daemon](https://discuss.elastic.co/u/daemon)
#### Post date: [July 31, 2020, 6:00am UTC](https://discuss.elastic.co/t/logstash-filter-error-message-logstash-configurationerror/243307/1 "2020-07-31T06:00:57Z")

</div>

When I start Logstash I get the below error.

filter{

mutate {

}

grok {  
match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:requestTime}||%{WORD:type}||%{WORD:jobId}||%{DATA:edgeId}||%{GREEDYDATA:other}"}  
#match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:requestTime}||%{WORD:type}||%{WORD:jobId}||%{DATA:edgeId}||%{WORD:statusCode}||%{GREEDYDATA:msg}"}  
#match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:requestTime}||%{WORD:type}||%{WORD:jobId}||%{DATA:edgeId}||%{WORD:statusCode}"}  
add\_field =\> { "hostname" =\> "%{edgeId}" }  
}

if [other] != "||"{  
mutate {  
split =\> ["other", "||"]  
add\_field =\> {"statusCode" =\> %{[other][0}}  
add\_field =\> {"msg" =\> %{[other][1}}  
}  
}else{  
mutate {  
add\_field =\> {"statusCode" =\> %{[other]}}  
add\_field =\> {"msg" =\> ""}  
}  
}

mutate {  
update =\> { "message" =\> "type:%{type},jobId:%{jobId},edgeId:%{edgeId},statusCode:%{statusCode},msg:%{msg},end" }  
#update =\> { "message" =\> "type:%{type},jobId:%{jobId},edgeId:%{edgeId},statusCode:%{statusCode},end" }  
remove\_field =\> ["type","jobId","edgeId","statusCode","msg"]  
}  
}

---

<div class="post-metadata">

### Author: ![Jenni](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jenni/32/29684_2.png) [@Jenni](https://discuss.elastic.co/u/Jenni)
#### Post date: [July 31, 2020, 6:06am UTC](https://discuss.elastic.co/t/logstash-filter-error-message-logstash-configurationerror/243307/2 "2020-07-31T06:06:09Z")

</div>

> [@daemon](#):
>
> %{[other][0

You didn't post the error, but I can already tell you what you forgot the quotes around the strings for all three `add_field` commands as well as the closing `]` for the first two.

Please always format code as code `</>` with correct indentation to make it readable.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 28, 2020, 6:10am UTC](https://discuss.elastic.co/t/logstash-filter-error-message-logstash-configurationerror/243307/4 "2020-08-28T06:10:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
