Elasticsearch and kibana are running perfectly fine but whenver i try to run my logstash configuration file it throws me the following error:
C:\Users\Dell -\Desktop\ELK\logstash-5.5.2\bin>logstash -f logstash-simple.conf ERROR StatusLogger No log4j2 configuration file found. Using default configuration: logging only errors to the console. An unexpected error occurred! :error => bad URI(is not URI?): file:///C:/Users/Dell -/Desktop/ELK/logstash-5.5.2/config/log4j2.properties, :backtrace => ["C:/Users/Dell -/Desktop/ELK/logstash-5.5.2/vendor/jruby/lib/ruby/1.9/uri/common.rb:176:in split'", "C:/Users/Dell -/Desktop/ELK/logstash-5.5.2/vendor/jruby/lib/ruby/1.9/uri/common.rb:210:inparse'", "C:/Users/Dell -/Desktop/ELK/logstash-5.5.2/vendor/jruby/lib/ruby/1.9/uri/common.rb:747:in parse'", "C:/Users/Dell -/Desktop/ELK/logstash-5.5.2/vendor/jruby/lib/ruby/1.9/uri/common.rb:994:inURI'", "C:/Users/Dell -/Desktop/ELK/logstash-5.5.2/logstash-core/lib/logstash/logging/logger.rb:77:in initialize'", "org/jruby/ext/thread/Mutex.java:149:insynchronize'", "C:/Users/Dell -/Desktop/ELK/logstash-5.5.2/logstash-core/lib/logstash/logging/logger.rb:75:in initialize'", "C:/Users/Dell -/Desktop/ELK/logstash-5.5.2/logstash-core/lib/logstash/runner.rb:229:inexecute'", "C:/Users/Dell -/Desktop/ELK/logstash-5.5.2/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:67:in run'", "C:/Users/Dell -/Desktop/ELK/logstash-5.5.2/logstash-core/lib/logstash/runner.rb:209:inrun'", "C:/Users/Dell -/Desktop/ELK/logstash-5.5.2/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:132:in run'", "C:\\Users\\Dell -\\Desktop\\ELK\\logstash-5.5.2\\lib\\bootstrap\\environment.rb:71:in(root)'"]
My configuration file is:
input {
file{
path => "C:/Users/Dell -/Desktop/ELK/nessus_sample.csv"
start_position => "beginning"
sincedb_path => "/dev/null"
}
}
filter{
csv {
seperator => ","
colums => ["Plugin ID", "CVE", "CVS", "Risk", "Host", "Protocol", "Port", "Name", "Synopsis", "Description", "Solution", "See also", "Plugin output"]
}
mutate {convert => ["Plugin ID", "integer"]}
mutate {convert => ["Port", "integer"]}
}
output {
elasticsearch {
hosts => "localhost:9200"
index => "nessus_sample"
document_type => "Scanned_ip"
}
stdout { }
}