# Setting Up an Advanced Logstash Pipeline

**URL:** https://discuss.elastic.co/t/setting-up-an-advanced-logstash-pipeline/38472
**Category:** Logstash
**Created:** [January 6, 2016, 7:53am UTC](https://discuss.elastic.co/t/setting-up-an-advanced-logstash-pipeline/38472 "2016-01-06T07:53:19Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![Architha](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/architha/32/92477_2.png) [@Architha](https://discuss.elastic.co/u/Architha)
#### Post date: [January 6, 2016, 7:53am UTC](https://discuss.elastic.co/t/setting-up-an-advanced-logstash-pipeline/38472/1 "2016-01-06T07:53:20Z")

</div>

Hi All,

I am new to Logstash and i was referring to the document on Setting Up an Advanced Logstash Pipeline (link:[https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html#advanced-pipeline](https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html#advanced-pipeline))  
I have done the same way as it was mentioned in the doc. But when i try a test query to Elasticsearch based on the fields created by the grok filter plugin , i get the following as output :

![](https://us1.discourse-cdn.com/elastic/original/2X/6/63b42a6f14de8a89535b9926fb019c37125431b2.PNG)

Please provide feedback on this issue. Thanks in Advance!

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [January 6, 2016, 7:55am UTC](https://discuss.elastic.co/t/setting-up-an-advanced-logstash-pipeline/38472/2 "2016-01-06T07:55:01Z")

</div>

Can you paste the text, not a screenshot. It's a lot easier to read.

---

<div class="post-metadata">

### Author: ![Architha](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/architha/32/92477_2.png) [@Architha](https://discuss.elastic.co/u/Architha)
#### Post date: [January 6, 2016, 7:58am UTC](https://discuss.elastic.co/t/setting-up-an-advanced-logstash-pipeline/38472/3 "2016-01-06T07:58:08Z")

</div>

Sure !  
Here is the text :

* * *

C:\Users\ajuttu1\>curl -XGET "localhost:9200/logstash-2016.01.06/\_search?q=respon  
se=200"  
{"error":{"root\_cause":[{"type":"index\_not\_found\_exception","reason":"no such in  
dex","resource.type":"index\_or\_alias","[resource.id](http://resource.id)":"logstash-2016.01.06","index  
":"logstash-2016.01.06"}],"type":"index\_not\_found\_exception","reason":"no such i  
ndex","resource.type":"index\_or\_alias","[resource.id](http://resource.id)":"logstash-2016.01.06","inde  
x":"logstash-2016.01.06"},"status":404}

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [January 6, 2016, 8:01am UTC](https://discuss.elastic.co/t/setting-up-an-advanced-logstash-pipeline/38472/4 "2016-01-06T08:01:18Z")

</div>

As it says, the index doesn't exist.  
Have you checked what exists in ES?

---

<div class="post-metadata">

### Author: ![Architha](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/architha/32/92477_2.png) [@Architha](https://discuss.elastic.co/u/Architha)
#### Post date: [January 6, 2016, 8:09am UTC](https://discuss.elastic.co/t/setting-up-an-advanced-logstash-pipeline/38472/5 "2016-01-06T08:09:41Z")

</div>

## When i verify my configuration , the following is the output :

C:\logstash-2.1.1\bin\>logstash -f first-pipeline.conf --configtest  
_io/console not supported; tty will not be manipulated_  
_Configuration OK_

* * *

And then i started Logstash :  
C:\logstash-2.1.1\bin\>logstash -f first-pipeline.conf  
_io/console not supported; tty will not be manipulated_  
_Settings: Default filter workers:1_  
_Logstash startup completed_

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [January 6, 2016, 8:11am UTC](https://discuss.elastic.co/t/setting-up-an-advanced-logstash-pipeline/38472/6 "2016-01-06T08:11:22Z")

</div>

Right, but did you put anything in ES?

Use [https://www.elastic.co/guide/en/elasticsearch/reference/2.1/cat-indices.html](https://www.elastic.co/guide/en/elasticsearch/reference/2.1/cat-indices.html)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 5:16am UTC](https://discuss.elastic.co/t/setting-up-an-advanced-logstash-pipeline/38472/8 "2017-07-06T05:16:42Z")

</div>


