Ok, Conf issue, i am missing something stupid

Elastic Stack Logstash
1

What's wrong with this conf?: (free beer for anyone who can help, in Guelph Ontario)
#Input from Log03 servers for bellMTS
input {
elasticsearch {
host => "192.168.76.249"
query => '{"query":{ "match": {"Web_Host": "emailpreferences.mts.ca"}}}
}
}
#output section
output {
elasticsearch {
hosts => "10.100.100.34"
index => "bellmts-%{+YYYY.MM.dd}"
}
}

The Error we get is:

Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:Bell MTS, :exception=>"LogStash::ConfigurationError", :message=>"Expected one of \', ', any character at line 14, column 10 (byte 328) after #Input from Log03 servers for bellMTS\ninput {\n\telasticsearch\t{\n\t\thost => "192.168.76.249"\n\t\tquery => '{"query":{ "match": {"Web_Host": "emailpreferences.mts.ca"}}} \n }\n }\n#output section\noutput {\n\telasticsearch {\n hosts => "10.100.100.34"\n index => "bellmts-%{+YYYY.MM.dd}"\n }\n }", :backtrace=>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:41:in compile_imperative'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:49:incompile_graph'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:11:in block in compile_sources'", "org/jruby/RubyArray.java:2577:inmap'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:10:in compile_sources'", "org/logstash/execution/AbstractPipelineExt.java:151:ininitialize'", "org/logstash/execution/JavaBasePipelineExt.java:47:in initialize'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:24:ininitialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:36:in execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:325:inblock in converge_state'"]}

I know it must be something simple, what am I missing.

2

Maybe you are missing a ' at the end of the line of
query => '{"query":{ "match": {"Web_Host": "emailpreferences.mts.ca"}}}'

1 Like
3

Thanks added that, (it was missing) now we have a different error:

Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:Bell MTS, :exception=>"LogStash::ConfigurationError", :message=>"Something is wrong with your configuration.", :backtrace=>["/usr/share/logstash/logstash-core/lib/logstash/config/mixin.rb:87:in config_init'", "/usr/share/logstash/logstash-core/lib/logstash/inputs/base.rb:60:ininitialize'", "org/logstash/plugins/PluginFactoryExt.java:258:in plugin'", "org/logstash/plugins/PluginFactoryExt.java:120:inbuildInput'", "org/logstash/execution/JavaBasePipelineExt.java:50:in initialize'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:24:ininitialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:36:in execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:325:inblock in converge_state'"]}

4

There should be another error message immediately before that.

5

Hey Badger,

you are good, host vs. hosts

ill try that now

6

ok, past that hurdle, thanks again Badger, onto the next one

have a great evening, (free beer in Guelph Ontario if you pass this way)

1 Like
7

So I don't get a beer? :sob: hahaha

8

Of course, you id'd the first issue, let me know when you will be here :smiley:

1 Like
9

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.