TypeError: no implicit conversion from nil to integer

Elastic Stack Logstash
1

I am getting this error and I am not able to understand what it means. i am parsing CISCO ASA logs and I am getting this error. Below is my config file.

input {
    file {
        path => "/⁨Users⁩/samvidkulkarni⁩/Desktop⁩/input⁩/asa.txt"
        start_position => "beginning"
    }
}


filter {
    grok {
      match => ["message", "%{TIMESTAMP_ISO8601:timestamp}\|\|%{NUMBER:syslog_cat}\|\|%{NUMBER:syslog_severity}\|\|%{IP:client}\|\|%{GREEDYDATA:message}"]
    }

    grok {
      match => [
        "message", "%{CISCOFW106001}",
        "message", "%{CISCOFW106006_106007_106010}",
        "message", "%{CISCOFW106014}",
        "message", "%{CISCOFW106015}",
        "message", "%{CISCOFW106021}",
        "message", "%{CISCOFW106023}",
        "message", "%{CISCOFW106100}",
        "message", "%{CISCOFW110002}",
        "message", "%{CISCOFW302010}",
        "message", "%{CISCOFW302013_302014_302015_302016}",
        "message", "%{CISCOFW302020_302021}",
        "message", "%{CISCOFW305011}",
        "message", "%{CISCOFW313001_313004_313008}",
        "message", "%{CISCOFW313005}",
        "message", "%{CISCOFW402117}",
        "message", "%{CISCOFW402119}",
        "message", "%{CISCOFW419001}",
        "message", "%{CISCOFW419002}",
        "message", "%{CISCOFW500004}",
        "message", "%{CISCOFW602303_602304}",
        "message", "%{CISCOFW710001_710002_710003_710005_710006}",
        "message", "%{CISCOFW713172}",
        "message", "%{CISCOFW733100}"
      ]
    }
}

output {
    
        elasticsearch {
            hosts => ["localhost:9200"]
            manage_template => false
            index => "firewall-%{+YYYY.MM.dd}"
        }
}

Below is the output on the console.

[2018-12-14T10:19:09,739][INFO ][logstash.outputs.elasticsearch] New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["//localhost:9200"]}

[2018-12-14T10:19:16,061][ERROR][logstash.pipeline ] Error registering plugin {:pipeline_id=>"main", :plugin=>"<LogStash::Inputs::File start_position=>\"beginning\", path=>[\"/⁨Users⁩/samvidkulkarni⁩/Desktop⁩⁩/input⁩/asa.txt\"], id=>\"0c79863f76c432a5cc655e9f6cee11085f24b17e364647302db720ad5936d743\", enable_metric=>true, codec=><LogStash::Codecs::Plain id=>\"plain_a69fa7a5-5c17-4a0d-bf86-211f8db99412\", enable_metric=>true, charset=>\"UTF-8\">, stat_interval=>1.0, discover_interval=>15, sincedb_write_interval=>15.0, delimiter=>\"\\n\", close_older=>3600.0, mode=>\"tail\", file_completed_action=>\"delete\", sincedb_clean_after=>1209600.0, file_chunk_size=>32768, file_chunk_count=>140737488355327, file_sort_by=>\"last_modified\", file_sort_direction=>\"asc\">", :error=>"no implicit conversion from nil to integer", :thread=>"#<Thread:0x62ce4127 run>"}

[2018-12-14T10:19:16,764][ERROR][logstash.pipeline ] Pipeline aborted due to error {:pipeline_id=>"main", :exception=>#<TypeError: no implicit conversion from nil to integer>, :backtrace=>["org/jruby/RubyString.java:2995:in `[]'", "uri:classloader:/META-INF/jruby.home/lib/ruby/stdlib/pathname.rb:44:in `chop_basename'", "uri:classloader:/META-INF/jruby.home/lib/ruby/stdlib/pathname.rb:240:in `relative?'", "/Users/samvidkulkarni/Downloads/logstash-6.5.3/vendor/bundle/jruby/2.3.0/gems/logstash-input-file-4.1.8/lib/logstash/inputs/file.rb:268:in `block in register'", "org/jruby/RubyArray.java:1734:in `each'", "/Users/samvidkulkarni/Downloads/logstash-6.5.3/vendor/bundle/jruby/2.3.0/gems/logstash-input-file-4.1.8/lib/logstash/inputs/file.rb:267:in `register'", "/Users/samvidkulkarni/Downloads/logstash-6.5.3/logstash-core/lib/logstash/pipeline.rb:242:in `register_plugin'", "/Users/samvidkulkarni/Downloads/logstash-6.5.3/logstash-core/lib/logstash/pipeline.rb:253:in `block in register_plugins'", "org/jruby/RubyArray.java:1734:in `each'", "/Users/samvidkulkarni/Downloads/logstash-6.5.3/logstash-core/lib/logstash/pipeline.rb:253:in `register_plugins'", "/Users/samvidkulkarni/Downloads/logstash-6.5.3/logstash-core/lib/logstash/pipeline.rb:396:in `start_inputs'", "/Users/samvidkulkarni/Downloads/logstash-6.5.3/logstash-core/lib/logstash/pipeline.rb:294:in `start_workers'", "/Users/samvidkulkarni/Downloads/logstash-6.5.3/logstash-core/lib/logstash/pipeline.rb:200:in `run'", "/Users/samvidkulkarni/Downloads/logstash-6.5.3/logstash-core/lib/logstash/pipeline.rb:160:in `block in start'"], :thread=>"#<Thread:0x62ce4127 run>"}

[2018-12-14T10:19:16,804][ERROR][logstash.agent ] Failed to execute action {:id=>:main, :action_type=>LogStash::ConvergeResult::FailedAction, :message=>"Could not execute action: PipelineAction::Create<main>, action_result: false", :backtrace=>nil}

I dont understand what is this error. This same code was working in previous version of logstash is not woking for latest one. i have logstash 6.5.3. i did clean installation (not upgrade) yesterday.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.