Odd Logstash Message


(Daniel) #1

Hi all,

I'm trying to use Logstash for the first time, I've setup my configuration files and it was working perfectly but suddenly now it's stopped. I think I've made a change but I don't 100% remember what change would have caused this.

I've got for you:
elasticsearch.yml: http://pastebin.com/ihqeTfQv
The error message from Logstash: http://pastebin.com/ibhTmStN
The error message from elasticsearch: http://pastebin.com/fNXJVvZz

What have I done wrong?


(Mark Walkom) #2

What versions of things are you running?


(Daniel) #3

I'm using:

Elasticsearch 2.0.0
Logstash 2.0.0


(Mark Walkom) #4

You may be running into this with ES, so check it and try again :slight_smile:


(Christian Dahlqvist) #5

What does your Logstash config look like? Elasticsearch seems to be complaining about an illegal setting for the _type field:

[2015-11-23 19:54:27,414][INFO ][rest.suppressed ] /_bulk Params: {}
java.lang.IllegalArgumentException: Malformed action/metadata line [1], expected a simple value for field [_type] but found [START_ARRAY]


(system) #6