Pipeline aborted due to error in password field logstash

Elastic Stack Logstash
1

Hi everyone,
I got an error when sending output to elasticsearch.
The error message like this.

[2016-12-14T13:20:18,500][ERROR][logstash.agent ] Pipeline aborted due to error {:exception=>#<URI::InvalidComponentError: bad component(expected user component):mypassword>, :backtrace=>["/usr/share/logstash/vendor/jruby/lib/ruby/1.9/uri/generic.rb:440:in check_password'", "/usr/share/logstash/vendor/jruby/lib/ruby/1.9/uri/generic.rb:512:inpassword='", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-5.2.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:245:in normalize_url'", "org/jruby/RubyArray.java:2414:inmap'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-5.2.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:255:in update_urls'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-5.2.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:66:ininitialize'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-5.2.1-java/lib/logstash/outputs/elasticsearch/http_client.rb:142:in build_pool'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-5.2.1-java/lib/logstash/outputs/elasticsearch/http_client.rb:20:ininitialize'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-5.2.1-java/lib/logstash/outputs/elasticsearch/http_client_builder.rb:53:in build'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-5.2.1-java/lib/logstash/outputs/elasticsearch.rb:188:inbuild_client'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-elasticsearch-5.2.1-java/lib/logstash/outputs/elasticsearch/common.rb:13:in register'", "/usr/share/logstash/logstash-core/lib/logstash/output_delegator_strategies/shared.rb:8:inregister'", "/usr/share/logstash/logstash-core/lib/logstash/output_delegator.rb:37:in register'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:196:instart_workers'", "org/jruby/RubyArray.java:1613:in each'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:196:instart_workers'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:153:in run'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:250:instart_pipeline'"]}
[2016-12-14T13:20:18,533][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}

Anyone can help me with this ?
Thanks for reading this, nice day.

2

Could you provide the elasticsearch-output configuration inside your logstash config file(s)?

3

Hi Nick, here is my config

elasticsearch {
hosts => ["http://x.x.x.x:9200"]
manage_template => false
template_name => "network-*"
index => "network-%{+YYYY.MM.dd}"
document_type => "%{type}"
document_id => "%{fingerprint}"
user => "xxxx"
password => "xxxSys201^"
}

4

I think there might be a bug in the ES output within LS 5.x (we're currently investigating) -- for now, your password needs to be encoded so it's URL safe.

So your special character ^ would require your config to look like password => "xxxSys201%5E"

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.