# Trouble sending logs to Logstash from Filebeat - Pipeline error recieved

**URL:** <https://discuss.elastic.co/t/trouble-sending-logs-to-logstash-from-filebeat-pipeline-error-recieved/225566>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 29, 2020, 4:27pm UTC](https://discuss.elastic.co/t/trouble-sending-logs-to-logstash-from-filebeat-pipeline-error-recieved/225566 "2020-03-29T16:27:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![13ill13urr](https://avatars.discourse-cdn.com/v4/letter/1/46a35a/32.png) [@13ill13urr](https://discuss.elastic.co/u/13ill13urr)\
**Post date:** [March 29, 2020, 4:27pm UTC](https://discuss.elastic.co/t/trouble-sending-logs-to-logstash-from-filebeat-pipeline-error-recieved/225566/1 "2020-03-29T16:27:41Z")

</div>

Hi there, pretty new to the Elastic Stack and I keep getting an error when trying to set up Filebeats and Logstash to work together.

Error:  
\<  
'''  
Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of [\t\r\n], "#  
", "=\>" at line 13, column 10 (byte 255) after output {\n\telasticsearch {\n\t\thosts =\> "[http://192.168.0.26:9200](http://192.168.0.26:9200)"\n\t\tmanage\_template =\> false\n\t\tindex =\> "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"\n\t\tpipeline =\> "%{[@metadata][pipeline]}"\n\t\tstdout ", :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:47:in `compile_imperative'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:55:in `compile\_graph'", "/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:17:in `block in compile_sources'", "org/logstash/execution/AbstractPipelineExt.java:161:in `initialize'", "org/logstash/execution/JavaBasePipelineExt.java:47:in `initialize'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:36:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:326:in `block in converge\_state'"]}  
'''  
/\>

I cannot make heads no tails as to what this error is trying to tell me or what I have done wrong.

My logstash.conf file looks like so:

\<  
'''  
input {  
beats {  
port =\> 5044  
}  
}

output {  
elasticsearch {  
hosts =\> "[http://192.168.0.26:9200](http://192.168.0.26:9200)"  
manage\_template =\> false  
index =\> "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"  
pipeline =\> "%{[@metadata][pipeline]}"  
stdout {  
codec =\> rubydebug  
}  
}  
}  
'''  
/\>

Any and all help would be greatly appreciated.

---

<div class="post-metadata">

**Author:** ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)\
**Post date:** [March 30, 2020, 8:58am UTC](https://discuss.elastic.co/t/trouble-sending-logs-to-logstash-from-filebeat-pipeline-error-recieved/225566/2 "2020-03-30T08:58:51Z")

</div>

Hi!

Since this is a Logstash error I would suggest you to try your question on Logstash forum so as to find experts there to cover you. At this point I don't think it has to do with Filebeat at all.

Thank you!

---

<div class="post-metadata">

**Author:** ![13ill13urr](https://avatars.discourse-cdn.com/v4/letter/1/46a35a/32.png) [@13ill13urr](https://discuss.elastic.co/u/13ill13urr)\
**Post date:** [March 31, 2020, 3:19pm UTC](https://discuss.elastic.co/t/trouble-sending-logs-to-logstash-from-filebeat-pipeline-error-recieved/225566/3 "2020-03-31T15:19:40Z")

</div>

My apologies! I'll be more mindful of this in the future.

I also believe I found the solution anyway. I believe the issue was that I has "http://" within the "host" section of the Ealsticsearch output.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 28, 2020, 3:29pm UTC](https://discuss.elastic.co/t/trouble-sending-logs-to-logstash-from-filebeat-pipeline-error-recieved/225566/4 "2020-04-28T15:29:47Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.