# Logstash refuses to start **URL:** \ **Category:** Logstash\ **Created:** [January 13, 2021, 2:47pm UTC](https://discuss.elastic.co/t/logstash-refuses-to-start/261013 "2021-01-13T14:47:53Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Falikou1](https://avatars.discourse-cdn.com/v4/letter/f/74df32/32.png) [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Post date:** [January 13, 2021, 2:47pm UTC](https://discuss.elastic.co/t/logstash-refuses-to-start/261013/1 "2021-01-13T14:47:53Z")
Logstash configuration parsing is: input { tcp { port =\> "5141" codec =\> json type =\> "syslog" } } filter { grok { match =\> { "message" =\> "%{SYSLOG5424PRI:syslog\_index}-\s\*%{SYSLOGHOST:syslog\_hostname} %{GREEDYDATA:syslog\_message}" } } json { source =\> "syslog\_message" } } output { stdout { codec =\> rubydebug } elasticsearch { hosts =\> ["[https://xxxxxx:9200](https://xxxxxx:9200)", "[https://xxxxxx:9200](https://xxxxxx:9200)"] user =\> "xxxxx" password =\> "xxxxxxxx" cacert =\> "/etc/logstash/certs/ca.crt" index =\> "jstest-%{+YYYY.MM.dd}" action =\> "index" } } When I make the following command: tail -f /var/log/logstash/logstash-plain.log The output I have below: [2021-01-13T13:15:39,994][INFO][logstash.javapipeline] Pipeline terminated {"pipeline.id"=\>".monitoring-logstash"} [2021-01-13T13:15:40,341][INFO][logstash.runner] Logstash shut down. [2021-01-13T13:15:52,090][INFO][logstash.runner] Starting Logstash {"logstash.version"=\>"7.8.0", "jruby.version"=\>"jruby 9.2.11.1 (2.5.7) 2020-03-25 b1f55b1a40 Java HotSpot(TM) 64-Bit Server VM 14.0.1+7 on 14.0.1+7 +indy +jit [linux-x86\_64]"} [2021-01-13T13:15:53,436][INFO][logstash.monitoring.internalpipelinesource] Monitoring License OK [2021-01-13T13:15:53,441][INFO][logstash.monitoring.internalpipelinesource] Validated license for monitoring. Enabling monitoring pipeline. [2021-01-13T13:15:53,891][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of [\t\r\n], "#", "if", [A-Za-z0-9\_-], '"', "'", "}" at line 29, column 1 (byte 580) after output {\n stdout { codec =\> rubydebug }\n elasticsearch {\n hosts =\> ["[https://ELASTIC1:9200](https://ELASTIC1:9200)", "[https://ELASTIC2:9200](https://ELASTIC2:9200)"]\n user =\> "elastic"\n password =\> "xxxxxx"\n cacert =\> "/etc/logstash/certs/ca.crt"\n index =\> "jstest-%{+YYYY.MM.dd}"\n action =\> "index"\n}\n", :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:58:in `compile_imperative'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:66:in `compile\_graph'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:28:in `block in compile_sources'", "org/jruby/RubyArray.java:2577:in `map'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:27:in `compile_sources'", "org/logstash/execution/AbstractPipelineExt.java:181:in `initialize'", "org/logstash/execution/JavaBasePipelineExt.java:67:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:43:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline\_action/create.rb:52:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:342:in `block in converge\_state'"]} [2021-01-13T13:15:54,100][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of [\t\r\n], "#", "if", [A-Za-z0-9\_-], '"', "'", "}" at line 29, column 1 (byte 580) after output {\n stdout { codec =\> rubydebug }\n elasticsearch {\n hosts =\> ["[https://ELASTIC1:9200](https://ELASTIC1:9200)", "[https://ELASTIC2:9200](https://ELASTIC2:9200)"]\n user =\> "elastic"\n password =\> "wTWSIJIzYjCgSApPWbFD"\n cacert =\> "/etc/logstash/certs/ca.crt"\n index =\> "jstest-%{+YYYY.MM.dd}"\n action =\> "index"\n}\n", :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:58:in `compile_imperative'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:66:in `compile\_graph'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:28:in `block in compile_sources'", "org/jruby/RubyArray.java:2577:in `map'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:27:in `compile_sources'", "org/logstash/execution/AbstractPipelineExt.java:181:in `initialize'", "org/logstash/execution/JavaBasePipelineExt.java:67:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:43:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline\_action/create.rb:52:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:342:in `block in converge\_state'"]} [2021-01-13T13:15:54,490][INFO][org.reflections.Reflections] Reflections took 27 ms to scan 1 urls, producing 21 keys and 41 values [2021-01-13T13:15:54,672][WARN][logstash.outputs.elasticsearchmonitoring][.monitoring-logstash] \*\* WARNING \*\* Detected UNSAFE options in elasticsearch output configuration! \*\* WARNING \*\* You have enabled encryption but DISABLED certificate verifi I need help. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [January 14, 2021, 2:14am UTC](https://discuss.elastic.co/t/logstash-refuses-to-start/261013/2 "2021-01-14T02:14:44Z")
Try; ```auto hosts => `["https://xxxxxx:9200", "https://xxxxxx:9200"]` ``` As per the docs [https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-hosts](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-hosts) ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 11, 2021, 2:14am UTC](https://discuss.elastic.co/t/logstash-refuses-to-start/261013/3 "2021-02-11T02:14:48Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.