# Problem with logstash
**URL:** https://discuss.elastic.co/t/problem-with-logstash/137445
**Category:** Logstash
**Created:** [June 26, 2018, 2:08pm UTC](https://discuss.elastic.co/t/problem-with-logstash/137445 "2018-06-26T14:08:00Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@joce455](https://discuss.elastic.co/u/joce455)
#### Post date: [June 26, 2018, 2:08pm UTC](https://discuss.elastic.co/t/problem-with-logstash/137445/1 "2018-06-26T14:08:00Z")
Hi all, I have a problem to start logstash i think that the cause is my logstash.conf,
input {
udp {
port =\> 5000
codec =\> json
}
}
filter {
if [docker][image] =~ /^rancher/ or [docker][image] =~ /^bekt/ {
drop { }
}
mutate {
remove\_field =\> ["stream","tags"]
gsub =\> ["message", "\u001b", ""]
gsub =\> ["message", "[[0-9][0-9]m", ""]
gsub =\> ["message", "[\]", ""]
}
grok {
match =\> {
"message" =\> "%{TIMESTAMP\_ISO8601:date}](\s\s|\s)%{LOGLEVEL:logtype}: %{GREEDYDATA:header}(:\s|++++:|\s=\s)(%{GREEDYDATA:content}(reqId=%{GREEDYDATA:trasactionId})|%{GREEDYDATA:content})" }
}
split { field =\> "content" }
if [message] =~ "{"topic":" {
grok {
match =\> { "message" =\> "{"topic":%{QS:topic}"}
}
}
}
output {
elasticsearch {
hosts =\> ["elasticsearch:9200"]
}
stdout { codec =\> rubydebug }
}
I cant find the mistake, could someone help me please?.
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [June 26, 2018, 2:21pm UTC](https://discuss.elastic.co/t/problem-with-logstash/137445/2 "2018-06-26T14:21:15Z")
Presumably you get an error message when Logstash doesn't start...?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 24, 2018, 2:31pm UTC](https://discuss.elastic.co/t/problem-with-logstash/137445/3 "2018-07-24T14:31:51Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.