# Logstash.yml file shows syntax error

**URL:** https://discuss.elastic.co/t/logstash-yml-file-shows-syntax-error/381971
**Category:** Logstash
**Tags:** elastic-stack-monitoring, docker
**Created:** [September 16, 2025, 6:01am UTC](https://discuss.elastic.co/t/logstash-yml-file-shows-syntax-error/381971 "2025-09-16T06:01:26Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![piyush\_hn](https://avatars.discourse-cdn.com/v4/letter/p/eada6e/32.png) [@piyush\_hn](https://discuss.elastic.co/u/piyush_hn)
#### Post date: [September 16, 2025, 6:01am UTC](https://discuss.elastic.co/t/logstash-yml-file-shows-syntax-error/381971/1 "2025-09-16T06:01:26Z")

</div>

Hi All,

I am trying to setup logstash in a container but getting an error like below, can someone please help what is wrong here ?. Older version of logstash was not having any issues for “http.host”, something changed in logstash 9.0.0 ?

Error snippet,

> Your settings are invalid. Reason: Setting "http.host" doesn't exist. Please check if you haven't made a typo.  
> [2025-09-16T05:54:29,960][FATAL][org.logstash.Logstash] Logstash stopped processing because of an error: (SystemExit) exit  
> org.jruby.exceptions.SystemExit: (SystemExit) exit  
> at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:924) ~[jruby.jar:?]  
> at org.jruby.RubyKernel.exit(org/jruby/RubyKernel.java:883) ~[jruby.jar:?]  
> at usr.share.logstash.lib.bootstrap.environment.(/usr/share/logstash/lib/bootstrap/environment.rb:90) ~[?:?]

logstash.yml is like below,

> http:  
> host: "0.0.0.0"
> 
> xpack:  
> monitoring:  
> enabled: true  
> elasticsearch:  
> username: "elastic"  
> password: "1bZX\_QURTy\*0fHDy3JqW"  
> hosts: ["[https://43.205.231.12:9200](https://43.205.231.12:9200)"]  
> ssl:  
> verification\_mode: none

Thanks,

Piyush

---

<div class="post-metadata">

### Author: ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)
#### Post date: [September 16, 2025, 6:15am UTC](https://discuss.elastic.co/t/logstash-yml-file-shows-syntax-error/381971/2 "2025-09-16T06:15:16Z")

</div>

Hello @piyush_hn

It seems the default parameter name is different in 9.x version as per documentation :

[https://www.elastic.co/docs/reference/logstash/docker-config](https://www.elastic.co/docs/reference/logstash/docker-config)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/8/28e509480e1ac99fd7fabe4e2ca2259ff4c95bdf.png)

In 8.x version

> **[Configuring Logstash for Docker | Logstash Reference \[8.17\] | Elastic](https://www.elastic.co/guide/en/logstash/8.17/docker-config.html#docker-bind-mount-settings)**

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/3/e3c3726b8a7586689c9078e8745e3e8cba62611d.png)

Thanks!!

---

<div class="post-metadata">

### Author: ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [September 16, 2025, 1:34pm UTC](https://discuss.elastic.co/t/logstash-yml-file-shows-syntax-error/381971/3 "2025-09-16T13:34:09Z")

</div>

> [@piyush\_hn](#):
>
> Older version of logstash was not having any issues for “http.host”, something changed in logstash 9.0.0 ?

Yes, the `http.*` settings were deprecated on version 8 and they were removed entirely on version 9, you need to use the equivalent settings which are prefixed by `api.`, like `api.http.host`.

When changing between major versions you need to check the [breaking changes](https://www.elastic.co/docs/release-notes/logstash/breaking-changes) to avoid issues like that.