"Something is wrong with your Configuration Error" in logstash


(Sanjeev Ramakrishnan) #1

Hi Team,
I'm trying to run a simple logstash configuration that is mentioned below

input {
beats {
	port => 5044
}
}
filter {
kv {
	source => "message"
	trim => "{}"
	field_split => ","
	value_split => ":"
} 
}

output {
stdout { 
	codec => rubydebug 
}
 }

I'm getting an "Something is wrong with your configuration Error". I could figure out why exactly this error is thrown.

Sending Logstash logs to C:/Users/sramakeg/Downloads/ELK/logstash-6.5.1/logs whi
ch is now configured via log4j2.properties
[2018-11-26T19:38:58,648][WARN ][logstash.config.source.multilocal] Ignoring the
'pipelines.yml' file because modules or command line options are specified
[2018-11-26T19:38:58,685][INFO ][logstash.runner ] Starting Logstash {"
logstash.version"=>"6.5.1"}
[2018-11-26T19:39:02,887][ERROR][logstash.filters.kv ] Unknown setting 'tri
m' for kv
[2018-11-26T19:39:02,914][ERROR][logstash.agent ] Failed to execute ac
tion {:action=>LogStash::PipelineAction::Create/pipeline_id:main, :exception=>"L
ogStash::ConfigurationError", :message=>"Something is wrong with your configurat
ion.", :backtrace=>["C:/Users/sramakeg/Downloads/ELK/logstash-6.5.1/logstash-cor
e/lib/logstash/config/mixin.rb:86:in config_init'", "C:/Users/sramakeg/Download s/ELK/logstash-6.5.1/logstash-core/lib/logstash/filters/base.rb:126:ininitiali
ze'", "org/logstash/plugins/PluginFactoryExt.java:58:in filter_delegator'", "or g/logstash/plugins/PluginFactoryExt.java:226:inplugin'", "org/logstash/plugins
/PluginFactoryExt.java:166:in plugin'", "C:/Users/sramakeg/Downloads/ELK/logsta sh-6.5.1/logstash-core/lib/logstash/pipeline.rb:71:inplugin'", "(eval):12:in <eval>'", "org/jruby/RubyKernel.java:994:ineval'", "C:/Users/sramakeg/Download
s/ELK/logstash-6.5.1/logstash-core/lib/logstash/pipeline.rb:49:in initialize'", "C:/Users/sramakeg/Downloads/ELK/logstash-6.5.1/logstash-core/lib/logstash/pipe line.rb:90:ininitialize'", "C:/Users/sramakeg/Downloads/ELK/logstash-6.5.1/log
stash-core/lib/logstash/pipeline_action/create.rb:42:in block in execute'", "C: /Users/sramakeg/Downloads/ELK/logstash-6.5.1/logstash-core/lib/logstash/agent.rb :92:inblock in exclusive'", "org/jruby/ext/thread/Mutex.java:148:in synchroni ze'", "C:/Users/sramakeg/Downloads/ELK/logstash-6.5.1/logstash-core/lib/logstash /agent.rb:92:inexclusive'", "C:/Users/sramakeg/Downloads/ELK/logstash-6.5.1/lo
gstash-core/lib/logstash/pipeline_action/create.rb:38:in execute'", "C:/Users/s ramakeg/Downloads/ELK/logstash-6.5.1/logstash-core/lib/logstash/agent.rb:317:inblock in converge_state'"]}
[2018-11-26T19:39:03,513][INFO ][logstash.agent ] Successfully started
Logstash API endpoint {:port=>9600}

Any ideas on what might have gone wrong ?

Thank you in advance :slight_smile:


(Lewis Barclay) #2

In your log:

[2018-11-26T19:39:02,887][ERROR][logstash.filters.kv ] Unknown setting 'trim' for kv

There is no setting "trim" for KV, there is "trim_key" or "trim_value", please correct this.


(Sanjeev Ramakrishnan) #3

@Eniqmatic Oops !! Yeah, just now found that after testing the configuration. My bad, i dint notice that in first place.
Thank You so much for your response mate :sweat_smile::+1: