# Multiple pipelines syntax error

**URL:** <https://discuss.elastic.co/t/multiple-pipelines-syntax-error/221699>\
**Category:** Logstash\
**Created:** [March 2, 2020, 2:29pm UTC](https://discuss.elastic.co/t/multiple-pipelines-syntax-error/221699 "2020-03-02T14:29:00Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Devopsio](https://avatars.discourse-cdn.com/v4/letter/d/ebca7d/32.png) [@Devopsio](https://discuss.elastic.co/u/Devopsio)\
**Post date:** [March 2, 2020, 2:29pm UTC](https://discuss.elastic.co/t/multiple-pipelines-syntax-error/221699/1 "2020-03-02T14:29:00Z")

</div>

Hello. I'm trying to make multipipeline in Logstash (in a container) but it says there a syntax error. What's wrong?

```
Failed to execute action {:id=>:main, :action_type=>LogStash::ConvergeResult::FailedAction, 
:message=>"Expected one of [\\t\\r\\n], \"#\", \"input\", \"filter\", \"output\" at line 2, column 1 
(byte 24) after # config/pipelines.yml\n", :backtrace=>["/usr/share/logstash/logstash- 
core/lib/logstash/compiler.rb:41:in `compile_imperative'", "/usr/share/logstash/logstash- 
core/lib/logstash/compiler.rb:49:in `compile_graph'", "/usr/share/logstash/logstash- 
core/lib/logstash/compiler.rb:11:in `block in compile_sources'", 
"org/jruby/RubyArray.java:2584:in `map'", "/usr/share/logstash/logstash- 
core/lib/logstash/compiler.rb:10:in `compile_sources'", 
"org/logstash/execution/AbstractPipelineExt.java:156:in `initialize'", 
"org/logstash/execution/JavaBasePipelineExt.java:47:in `initialize'", 
"/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/reload.rb:37:in `execute'", 
"/usr/share/logstash/logstash-core/lib/logstash/agent.rb:326:in `block in converge_state'"]}

```

And my pipelines.yml looks like:

```
# config/pipelines.yml
- pipeline.id: main
  queue.type: persisted
  config.string: |
    input {
     beats {
            port => 5000
            ssl => true
            ssl_certificate => "/logstash.crt"
            ssl_key => "/logstash.key"
     }
}

output {
   if [host][name] == "mysrv" {
      pipeline {
        send_to => mysrv
      }
   }
}
```

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [March 2, 2020, 2:52pm UTC](https://discuss.elastic.co/t/multiple-pipelines-syntax-error/221699/2 "2020-03-02T14:52:22Z")

</div>

Could be a problem with indentation, but logstash says it read the text '# config/pipelines.yml' and you do not include that in your pipelines.yml so it may be reading some other file.

---

<div class="post-metadata">

**Author:** ![Devopsio](https://avatars.discourse-cdn.com/v4/letter/d/ebca7d/32.png) [@Devopsio](https://discuss.elastic.co/u/Devopsio)\
**Post date:** [March 2, 2020, 3:11pm UTC](https://discuss.elastic.co/t/multiple-pipelines-syntax-error/221699/3 "2020-03-02T15:11:25Z")

</div>

That's a comment I put above the config, hoping that's solve the problem. Alas, it didn't.

---

<div class="post-metadata">

**Author:** ![Devopsio](https://avatars.discourse-cdn.com/v4/letter/d/ebca7d/32.png) [@Devopsio](https://discuss.elastic.co/u/Devopsio)\
**Post date:** [March 2, 2020, 3:25pm UTC](https://discuss.elastic.co/t/multiple-pipelines-syntax-error/221699/4 "2020-03-02T15:25:17Z")

</div>

I thought I've used a wrong file: it should be config/pipelines.yml (logstash config), not actual pipelines. But after switching to the correct file the error message is the same.

---

<div class="post-metadata">

**Author:** ![Devopsio](https://avatars.discourse-cdn.com/v4/letter/d/ebca7d/32.png) [@Devopsio](https://discuss.elastic.co/u/Devopsio)\
**Post date:** [March 3, 2020, 9:44am UTC](https://discuss.elastic.co/t/multiple-pipelines-syntax-error/221699/5 "2020-03-03T09:44:32Z")

</div>

Turns out, I need to enclose pipeline names into quotes. Odd enough I didn't find anything related in the official documentation. The problem solved.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 31, 2020, 9:44am UTC](https://discuss.elastic.co/t/multiple-pipelines-syntax-error/221699/6 "2020-03-31T09:44:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.