Logstash.yml file shows syntax error

Elastic Stack Logstash
,
1

Hi All,

I am trying to setup logstash in a container but getting an error like below, can someone please help what is wrong here ?. Older version of logstash was not having any issues for “http.host”, something changed in logstash 9.0.0 ?

Error snippet,

Your settings are invalid. Reason: Setting "http.host" doesn't exist. Please check if you haven't made a typo.
[2025-09-16T05:54:29,960][FATAL][org.logstash.Logstash ] Logstash stopped processing because of an error: (SystemExit) exit
org.jruby.exceptions.SystemExit: (SystemExit) exit
at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:924) ~[jruby.jar:?]
at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:883) ~[jruby.jar:?]
at usr.share.logstash.lib.bootstrap.environment.(/usr/share/logstash/lib/bootstrap/environment.rb:90) ~[?:?]

logstash.yml is like below,

http:
host: "0.0.0.0"

xpack:
monitoring:
enabled: true
elasticsearch:
username: "elastic"
password: "1bZX_QURTy*0fHDy3JqW"
hosts: ["https://43.205.231.12:9200"]
ssl:
verification_mode: none

Thanks,

Piyush

2

Hello @piyush_hn

It seems the default parameter name is different in 9.x version as per documentation :

https://www.elastic.co/docs/reference/logstash/docker-config

image
image1006×366 19.2 KB

In 8.x version

image
image1057×403 18.3 KB

Thanks!!

3

Yes, the http.* settings were deprecated on version 8 and they were removed entirely on version 9, you need to use the equivalent settings which are prefixed by api., like api.http.host.

When changing between major versions you need to check the breaking changes to avoid issues like that.