Logstash won't run, openJDK 64-bit Server

Elastic Stack Logstash
1

I try to run log stash and this happens, does anyone know what is wrong please?

PS C:\logstash-7.10.1\bin> .\logstash.bat -f .\config\logstash.conf
"Using bundled JDK: ""
OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in
a future release.
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by org.jruby.ext.openssl.SecurityHelper (file:/C:/Users/marinab/AppData/Local/Temp/jr
uby-948/jruby9450500015786920281jopenssl.jar) to field java.security.MessageDigest.provider
WARNING: Please consider reporting this to the maintainers of org.jruby.ext.openssl.SecurityHelper
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
Sending Logstash logs to C:/logstash-7.10.1/logs which is now configured via log4j2.properties
[2021-02-03T16:58:53,106][INFO ][logstash.runner ] Starting Logstash {"logstash.version"=>"7.10.1", "jruby.vers
ion"=>"jruby 9.2.13.0 (2.5.7) 2020-08-03 9a89c94bcc OpenJDK 64-Bit Server VM 11.0.8+10 on 11.0.8+10 +indy +jit [mswin32-
x86_64]"}
[2021-02-03T16:58:53,590][WARN ][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or
command line options are specified
[2021-02-03T16:58:56,467][ERROR][logstash.agent ] Failed to execute action {:action=>LogStash::PipelineAction:
:Create/pipeline_id:main, :exception=>"LogStash::ConfigurationError", :message=>"Expected one of [ \t\r\n], "#", "
{", ",", "]" at line 5, column 34 (byte 81) after filter {\r\n\tmutate { lowercase => ["message"", :backtrace=>["
C:/logstash-7.10.1/logstash-core/lib/logstash/compiler.rb:32:in compile_imperative'", "org/logstash/execution/AbstractP ipelineExt.java:184:in initialize'", "org/logstash/execution/JavaBasePipelineExt.java:69:in initialize'", "C:/logstash -7.10.1/logstash-core/lib/logstash/java_pipeline.rb:47:in initialize'", "C:/logstash-7.10.1/logstash-core/lib/logstash/
pipeline_action/create.rb:52:in execute'", "C:/logstash-7.10.1/logstash-core/lib/logstash/agent.rb:365:in block in con
verge_state'"]}
[2021-02-03T16:58:57,008][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
[2021-02-03T16:59:01,827][INFO ][logstash.runner ] Logstash shut down.
[2021-02-03T16:59:01,858][ERROR][org.logstash.Logstash ] java.lang.IllegalStateException: Logstash stopped processing
because of an error: (SystemExit) exit
PS C:\logstash-7.10.1\bin>

2

You would need to show us what comes after that in your .\config\logstash.conf

3

input {
beats { port => 5043 }
}
filter {
mutate { lowercase => ["message"} }
}
output {
elasticsearch { hosts => ["localhost:9200"]
index => "indexForLogstash"
}

4

That should be mutate { lowercase => ["message"] }

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.