"Something is wrong with your Configuration Error" in logstash

Elastic Stack Logstash
1

Hi Team,
I'm trying to run a simple logstash configuration that is mentioned below

input {
beats {
	port => 5044
}
}
filter {
kv {
	source => "message"
	trim => "{}"
	field_split => ","
	value_split => ":"
} 
}

output {
stdout { 
	codec => rubydebug 
}
 }

I'm getting an "Something is wrong with your configuration Error". I could figure out why exactly this error is thrown.

Sending Logstash logs to C:/Users/sramakeg/Downloads/ELK/logstash-6.5.1/logs whi
ch is now configured via log4j2.properties
[2018-11-26T19:38:58,648][WARN ][logstash.config.source.multilocal] Ignoring the
'pipelines.yml' file because modules or command line options are specified
[2018-11-26T19:38:58,685][INFO ][logstash.runner ] Starting Logstash {"
logstash.version"=>"6.5.1"}
[2018-11-26T19:39:02,887][ERROR][logstash.filters.kv ] Unknown setting 'tri
m' for kv
[2018-11-26T19:39:02,914][ERROR][logstash.agent ] Failed to execute ac
tion {:action=>LogStash::PipelineAction::Create/pipeline_id:main, :exception=>"L
ogStash::ConfigurationError", :message=>"Something is wrong with your configurat
ion.", :backtrace=>["C:/Users/sramakeg/Downloads/ELK/logstash-6.5.1/logstash-cor
e/lib/logstash/config/mixin.rb:86:in config_init'", "C:/Users/sramakeg/Download s/ELK/logstash-6.5.1/logstash-core/lib/logstash/filters/base.rb:126:in initiali
ze'", "org/logstash/plugins/PluginFactoryExt.java:58:in filter_delegator'", "or g/logstash/plugins/PluginFactoryExt.java:226:in plugin'", "org/logstash/plugins
/PluginFactoryExt.java:166:in plugin'", "C:/Users/sramakeg/Downloads/ELK/logsta sh-6.5.1/logstash-core/lib/logstash/pipeline.rb:71:in plugin'", "(eval):12:in <eval>'", "org/jruby/RubyKernel.java:994:ineval'", "C:/Users/sramakeg/Download
s/ELK/logstash-6.5.1/logstash-core/lib/logstash/pipeline.rb:49:in initialize'", "C:/Users/sramakeg/Downloads/ELK/logstash-6.5.1/logstash-core/lib/logstash/pipe line.rb:90:in initialize'", "C:/Users/sramakeg/Downloads/ELK/logstash-6.5.1/log
stash-core/lib/logstash/pipeline_action/create.rb:42:in block in execute'", "C: /Users/sramakeg/Downloads/ELK/logstash-6.5.1/logstash-core/lib/logstash/agent.rb :92:in block in exclusive'", "org/jruby/ext/thread/Mutex.java:148:in synchroni ze'", "C:/Users/sramakeg/Downloads/ELK/logstash-6.5.1/logstash-core/lib/logstash /agent.rb:92:in exclusive'", "C:/Users/sramakeg/Downloads/ELK/logstash-6.5.1/lo
gstash-core/lib/logstash/pipeline_action/create.rb:38:in execute'", "C:/Users/s ramakeg/Downloads/ELK/logstash-6.5.1/logstash-core/lib/logstash/agent.rb:317:in block in converge_state'"]}
[2018-11-26T19:39:03,513][INFO ][logstash.agent ] Successfully started
Logstash API endpoint {:port=>9600}

Any ideas on what might have gone wrong ?

Thank you in advance :slight_smile:

2

In your log:

[2018-11-26T19:39:02,887][ERROR][logstash.filters.kv ] Unknown setting 'trim' for kv

There is no setting "trim" for KV, there is "trim_key" or "trim_value", please correct this.

1 Like
3

@Eniqmatic Oops !! Yeah, just now found that after testing the configuration. My bad, i dint notice that in first place.
Thank You so much for your response mate :sweat_smile::+1:

1 Like
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.