# Logstash plugin is installed and not listed and found by logstash **URL:** \ **Category:** Logstash\ **Created:** [May 16, 2023, 6:54pm UTC](https://discuss.elastic.co/t/logstash-plugin-is-installed-and-not-listed-and-found-by-logstash/333595 "2023-05-16T18:54:50Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![SAMY-ELK](https://avatars.discourse-cdn.com/v4/letter/s/e9c0ed/32.png) [@SAMY-ELK](https://discuss.elastic.co/u/SAMY-ELK)\ **Post date:** [May 16, 2023, 6:54pm UTC](https://discuss.elastic.co/t/logstash-plugin-is-installed-and-not-listed-and-found-by-logstash/333595/1 "2023-05-16T18:54:50Z")
Hi Team, Microsoft-sentinel-logstash-output-plugin is installed on logstash (7.15.1) server Linux but is not listed and found by logstash : /usr/share/logstash/bin #./logstash-plugin list Plugin successfully installed with CLI ruby gem : /usr/share/logstash/bin #./ruby -S gem install microsoft-sentinel-logstash-output-plugin .... .... ... Desired survivor size 8716288 bytes, new threshold 6 (max 6) - age 1: 4904448 bytes, 4904448 total - age 2: 1090536 bytes, 5994984 total - age 3: 1012680 bytes, 7007664 total - age 4: 417256 bytes, 7424920 total - age 5: 1243296 bytes, 8668216 total Desired survivor size 8716288 bytes, new threshold 4 (max 6) - age 1: 5538184 bytes, 5538184 total - age 2: 1405952 bytes, 6944136 total - age 3: 1089512 bytes, 8033648 total - age 4: 1012560 bytes, 9046208 total - age 5: 416928 bytes, 9463136 total - age 6: 1213536 bytes, 10676672 total Desired survivor size 8716288 bytes, new threshold 6 (max 6) - age 1: 5039672 bytes, 5039672 total - age 2: 1138760 bytes, 6178432 total - age 3: 1404496 bytes, 7582928 total - age 4: 1089512 bytes, 8672440 total Successfully installed microsoft-sentinel-logstash-output-plugin-1.0.0 1 gem installed error identify on log server logstash : message=\>"Unable to configure plugins: (PluginLoadingError) Couldn't find any output plugin named 'microsoft-sentinel-logstash-output-plugin'. Are you sure this is correct? Trying to load the microsoft-sentinel-logstash-output-plugin output plugin resulted in this error: Unable to load the requested plugin named microsoft-sentinel-logstash-output-plugin of type output. The plugin is not installed.", Thanks for your help ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [May 17, 2023, 12:07am UTC](https://discuss.elastic.co/t/logstash-plugin-is-installed-and-not-listed-and-found-by-logstash/333595/2 "2023-05-17T00:07:30Z")
> [@SAMY-ELK](#): > > Plugin successfully installed with CLI ruby gem That is not the right way to do the install. Microsoft [documents](https://learn.microsoft.com/en-us/azure/sentinel/connect-logstash#deploy-the-microsoft-sentinel-output-plugin-in-logstash) how to do it. ---
**Author:** ![SAMY-ELK](https://avatars.discourse-cdn.com/v4/letter/s/e9c0ed/32.png) [@SAMY-ELK](https://discuss.elastic.co/u/SAMY-ELK)\ **Post date:** [May 17, 2023, 1:58pm UTC](https://discuss.elastic.co/t/logstash-plugin-is-installed-and-not-listed-and-found-by-logstash/333595/3 "2023-05-17T13:58:43Z")
Hi Badger, Thanks for your reply. This is way to install plugin sentinel from our Artifactor (depotspaquets ) and not from internet. Our Artifactor contain all paquets , plugin and binaires necessary to be used for dev and deploy... Access to internet to download and install plugin not secured and not authorized from our network SAMY ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [May 17, 2023, 5:12pm UTC](https://discuss.elastic.co/t/logstash-plugin-is-installed-and-not-listed-and-found-by-logstash/333595/4 "2023-05-17T17:12:11Z")
> [@SAMY-ELK](#): > > This is way to install plugin sentinel from our Artifactor (depotspaquets ) and not from internet. Again, that is not the right way to do the install. The Microsoft documentation links to pages that explain how to build a package for an offline install. ---
**Author:** ![SAMY-ELK](https://avatars.discourse-cdn.com/v4/letter/s/e9c0ed/32.png) [@SAMY-ELK](https://discuss.elastic.co/u/SAMY-ELK)\ **Post date:** [May 23, 2023, 8:48pm UTC](https://discuss.elastic.co/t/logstash-plugin-is-installed-and-not-listed-and-found-by-logstash/333595/5 "2023-05-23T20:48:33Z")
Hi Badger, Thanks, Now i get this issue in log logstash after add config Output plugin sentinel : Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of [A-Za-z0-9\_-], [\t\r\n], "#", "{" at line 226, column 48 (byte 6995) after output {\n if [client] {\n if [client] == "iis" {\n if [indexname] {\n microsoft-sentinel-logstash-output-plugin-1", :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:32:in `compile_imperative'", "org/logstash/execution/AbstractPipelineExt.java:187:in `initialize'", "org/logstash/execution/JavaBasePipelineExt.java:72:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:47:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline\_action/create.rb:52:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:391:in `block in converge\_state'"]} our config in logstash : output { if [client] { if [client] == "iis" { if [indexname] { microsoft-sentinel-logstash-output-plugin-1.0.0 { client\_app\_Id =\> "........" client\_app\_secret =\> "......" tenant\_id =\> "....." data\_collection\_endpoint =\> "......." dcr\_immutable\_id =\> "......" dcr\_stream\_name =\> "....." } } } if [client] == "winlog.mxl" { ............ thanks for Help thanks for help ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [May 23, 2023, 9:24pm UTC](https://discuss.elastic.co/t/logstash-plugin-is-installed-and-not-listed-and-found-by-logstash/333595/6 "2023-05-23T21:24:34Z")
> [@SAMY-ELK](#): > > if [indexname] { > microsoft-sentinel-logstash-output-plugin-1.0.0 Remove the -1.0.0 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 20, 2023, 9:24pm UTC](https://discuss.elastic.co/t/logstash-plugin-is-installed-and-not-listed-and-found-by-logstash/333595/7 "2023-06-20T21:24:57Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.