# Unable to run logstash on windows 8.1 **URL:** \ **Category:** Logstash\ **Created:** [June 28, 2018, 12:19pm UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787 "2018-06-28T12:19:10Z")\ **Posts on this page:** 17\ **Page:** 1
**Author:** ![Revati\_Chawla](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/revati_chawla/32/48278_2.png) [@Revati\_Chawla](https://discuss.elastic.co/u/Revati_Chawla)\ **Post date:** [June 28, 2018, 12:19pm UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/1 "2018-06-28T12:19:10Z")
Hi I am unable to run logstash on windows 8.1 After running the command inside bin of logstash, logstash -f "filename.config" on the command prompt, I get a java.langException where it states that logstash stopped processing because of an error: exit. Please help me fix this, it is really urgent. Thanks ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [June 29, 2018, 7:41am UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/2 "2018-06-29T07:41:55Z")
Please copy/paste the full error message. ---
**Author:** ![Revati\_Chawla](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/revati_chawla/32/48278_2.png) [@Revati\_Chawla](https://discuss.elastic.co/u/Revati_Chawla)\ **Post date:** [July 20, 2018, 10:58am UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/3 "2018-07-20T10:58:20Z")
Hi I am trying to paste the error but there seems to be an error as I cannot paste more than 7000 words and my error has around 100,000+ words. Please let me know of an alternative. Thanks ---
**Author:** ![Jevgenij](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jevgenij/32/33543_2.png) [@Jevgenij](https://discuss.elastic.co/u/Jevgenij)\ **Post date:** [July 20, 2018, 11:23am UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/4 "2018-07-20T11:23:54Z")
You could use [https://pastebin.com/](https://pastebin.com/) ---
**Author:** ![Revati\_Chawla](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/revati_chawla/32/48278_2.png) [@Revati\_Chawla](https://discuss.elastic.co/u/Revati_Chawla)\ **Post date:** [July 20, 2018, 11:31am UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/5 "2018-07-20T11:31:06Z")
Yes, PFB the link for my entire error. [https://pastebin.com/HkrGthNS](https://pastebin.com/HkrGthNS) ---
**Author:** ![Revati\_Chawla](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/revati_chawla/32/48278_2.png) [@Revati\_Chawla](https://discuss.elastic.co/u/Revati_Chawla)\ **Post date:** [July 20, 2018, 11:31am UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/6 "2018-07-20T11:31:17Z")
Thank you so much 🙂 ---
**Author:** ![Jevgenij](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jevgenij/32/33543_2.png) [@Jevgenij](https://discuss.elastic.co/u/Jevgenij)\ **Post date:** [July 20, 2018, 11:58am UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/7 "2018-07-20T11:58:50Z")
As far as I can see, it does not have write access to its installation directory. Try running it as an administrator to check. ---
**Author:** ![Revati\_Chawla](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/revati_chawla/32/48278_2.png) [@Revati\_Chawla](https://discuss.elastic.co/u/Revati_Chawla)\ **Post date:** [July 20, 2018, 12:00pm UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/8 "2018-07-20T12:00:36Z")
Hi, I tried running it as an administrator, but as I run it as an administrator , the window opens and shuts downs after 3-4 minutes on its own. ---
**Author:** ![Jevgenij](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jevgenij/32/33543_2.png) [@Jevgenij](https://discuss.elastic.co/u/Jevgenij)\ **Post date:** [July 20, 2018, 12:21pm UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/9 "2018-07-20T12:21:39Z")
Run Command Prompt as Administrator. In Windows 7, follow these steps: Type cmd in Start search. Right-click on it and from the context menu select Run as Administrator. ---
**Author:** ![Revati\_Chawla](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/revati_chawla/32/48278_2.png) [@Revati\_Chawla](https://discuss.elastic.co/u/Revati_Chawla)\ **Post date:** [July 20, 2018, 1:51pm UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/10 "2018-07-20T13:51:26Z")
Hi So running on administrator, it worked. But I don't know what to do next. Below is what I get after running on administrator. Sending Logstash's logs to C:/Program Files/logstash-6.3.1/logs which is now configured via log4j2.properties [2018-07-20T19:19:33,135][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified [2018-07-20T19:19:33,223][INFO][logstash.agent] No persistent UUID file found. Generating new UUID {:uuid=\>"4b9c6cb2-3adc-4c0a-ba50-2d546cef539c", :path=\>"C:/Program Files/logstash-6.3.1/data/uuid"} [2018-07-20T19:19:33,900][INFO][logstash.runner] Starting Logstash {"logstash.version"=\>"6.3.1"} [2018-07-20T19:19:34,900][ERROR][logstash.agent] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #, =\> at line 23, column 12 (byte 670) after output{\n\tstdout { codec =\> rubydebug }\n\t\telasticsearch{\n\t\t\thosts =\>"[http://localhost:9200](http://localhost:9200)"\n\t\t\tindex =\>"ba"\n\t\t\tdocument", :backtrace=\>["C:/Program Files/logstash-6.3.1/logstash-core/lib/logstash/compiler.rb:42:in `compile_imperative'", "C:/Program Files/logstash-6.3.1/logstash-core/lib/logstash/compiler.rb:50:in`compile\_graph'", "C:/Program Files/logstash-6.3.1/logstash-core/lib/logstash/compiler.rb:12:in `block in compile_sources'", "org/jruby/RubyArray.java:2486:in`map'", "C:/Program Files/logstash-6.3.1/logstash-core/lib/logstash/compiler.rb:11:in `compile_sources'", "C:/Program Files/logstash-6.3.1/logstash-core/lib/logstash/pipeline.rb:49:in`initialize'", "C:/Program Files/logstash-6.3.1/logstash-core/lib/logstash/pipeline.rb:167:in `initialize'", "C:/Program Files/logstash-6.3.1/logstash-core/lib/logstash/pipeline_action/create.rb:40:in`execute'", "C:/Program Files/logstash-6.3.1/logstash-core/lib/logstash/agent.rb:305:in `block in converge\_state'"]} [2018-07-20T19:19:35,431][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600} ---
**Author:** ![Revati\_Chawla](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/revati_chawla/32/48278_2.png) [@Revati\_Chawla](https://discuss.elastic.co/u/Revati_Chawla)\ **Post date:** [July 20, 2018, 1:58pm UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/11 "2018-07-20T13:58:32Z")
Also I after running this file, my index in kibana does not get created and hence the data does not get loaded there. Anyway, I can rectify this? ---
**Author:** ![Jevgenij](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jevgenij/32/33543_2.png) [@Jevgenij](https://discuss.elastic.co/u/Jevgenij)\ **Post date:** [July 20, 2018, 2:03pm UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/12 "2018-07-20T14:03:38Z")
It looks like there is an error in your logstash config file. ---
**Author:** ![Revati\_Chawla](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/revati_chawla/32/48278_2.png) [@Revati\_Chawla](https://discuss.elastic.co/u/Revati_Chawla)\ **Post date:** [July 21, 2018, 6:35pm UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/13 "2018-07-21T18:35:41Z")
Hi Okay, I will just state below my config file, Let me know about your thoughts on that. input{ file{ path =\>"C:\Users\Revati Chawla\Desktop\folder\viz\_banks.csv" start\_position =\> "beginning" sincedb\_path =\> "C:\Users\Revati Chawla\Desktop\folder\dbflile" } } filter{ csv{ separator =\>"," columns =\> ["bank\_id","parent\_id", "title", "user\_id","account\_type","from\_account", "to\_account","timestamp","last\_ip","snapshot\_version","isDelete"] } mutate {convert =\> ["bank\_id", "integer"]} mutate {convert =\> ["parent\_id", "integer"]} mutate {convert =\> ["user\_id", "integer"]} mutate {convert =\> ["isDelete", "integer"]} } output{ stdout { codec =\> rubydebug } elasticsearch{ hosts =\>"[http://localhost:9200](http://localhost:9200)" index =\>"hello" document.type =\>"qbank\_cms" } ``` } ``` ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [July 21, 2018, 8:13pm UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/14 "2018-07-21T20:13:04Z")
> document.type =\>"qbank\_cms" `document_type`, not `document.type`. ---
**Author:** ![Revati\_Chawla](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/revati_chawla/32/48278_2.png) [@Revati\_Chawla](https://discuss.elastic.co/u/Revati_Chawla)\ **Post date:** [July 23, 2018, 5:29am UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/15 "2018-07-23T05:29:07Z")
After Running the command again, The command prompt gets stuck at this and doesn't move further, Sending Logstash's logs to C:/Program Files/logstash-6.3.1/logs which is now configured via log4j2.properties [2018-07-23T10:14:41,426][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified [2018-07-23T10:14:42,200][INFO][logstash.runner] Starting Logstash {"logstash.version"=\>"6.3.1"} [2018-07-23T10:14:48,970][WARN][logstash.outputs.elasticsearch] You are using a deprecated config setting "document\_type" set in elasticsearch. Deprecated settings will continue to work, but are scheduled for removal from logstash in the future. Document types are being deprecated in Elasticsearch 6.0, and removed entirely in 7.0. You should avoid this feature If you have any questions about this, please visit the #logstash channel on freenode irc. {:name=\>"document\_type", :plugin=\>\[[http://localhost:9200](http://localhost:9200)], index=\>"hello", document\_type=\>"qbank\_cms", id=\>"3b477880dbc0d0e0fdd7c39a472608a79d0368cbc10bdee7de98757eaf2a774d", enable\_metric=\>true, codec=\>\"plain\_efc79136-0d71-46b6-82f7-6750ab929097", enable\_metric=\>true, charset=\>"UTF-8"\>, workers=\>1, manage\_template=\>true, template\_name=\>"logstash", template\_overwrite=\>false, doc\_as\_upsert=\>false, script\_type=\>"inline", script\_lang=\>"painless", script\_var\_name=\>"event", scripted\_upsert=\>false, retry\_initial\_interval=\>2, retry\_max\_interval=\>64, retry\_on\_conflict=\>1, action=\>"index", ssl\_certificate\_verification=\>true, sniffing=\>false, sniffing\_delay=\>5, timeout=\>60, pool\_max=\>1000, pool\_max\_per\_route=\>100, resurrect\_delay=\>5, validate\_after\_inactivity=\>10000, http\_compression=\>false\>} [2018-07-23T10:14:49,079][INFO][logstash.pipeline] Starting pipeline {:pipeline\_id=\>"main", "pipeline.workers"=\>4, "pipeline.batch.size"=\>125, "pipeline.batch.delay"=\>50} [2018-07-23T10:14:49,900][INFO][logstash.outputs.elasticsearch] Elasticsearch pool URLs updated {:changes=\>{:removed=\>[], :added=\>[[http://localhost:9200/](http://localhost:9200/)]}} [2018-07-23T10:14:49,916][INFO][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck\_url=\>[http://localhost:9200/](http://localhost:9200/), :path=\>"/"} [2018-07-23T10:14:50,401][WARN][logstash.outputs.elasticsearch] Restored connection to ES instance {:url=\>"[http://localhost:9200/](http://localhost:9200/)"} [2018-07-23T10:14:50,526][INFO][logstash.outputs.elasticsearch] ES Output version determined {:es\_version=\>6} [2018-07-23T10:14:50,542][WARN][logstash.outputs.elasticsearch] Detected a 6.x and above cluster: the `type` event field won't be used to determine the document \_type {:es\_version=\>6} [2018-07-23T10:14:50,569][INFO][logstash.outputs.elasticsearch] New Elasticsearch output {:class=\>"LogStash::Outputs::ElasticSearch", :hosts=\>["[http://localhost:9200](http://localhost:9200)"]} [2018-07-23T10:14:50,616][INFO][logstash.outputs.elasticsearch] Using mapping template from {:path=\>nil} [2018-07-23T10:14:50,679][INFO][logstash.outputs.elasticsearch] Attempting to install template {:manage\_template=\>{"template"=\>"logstash-_", "version"=\>60001, "settings"=\>{"index.refresh\_interval"=\>"5s"}, "mappings"=\>{"default"=\>{"dynamic\_templates"=\>[{"message\_field"=\>{"path\_match"=\>"message", "match\_mapping\_type"=\>"string", "mapping"=\>{"type"=\>"text", "norms"=\>false}}}, {"string\_fields"=\>{"match"=\>"_", "match\_mapping\_type"=\>"string", "mapping"=\>{"type"=\>"text", "norms"=\>false, "fields"=\>{"keyword"=\>{"type"=\>"keyword", "ignore\_above"=\>256}}}}}], "properties"=\>{"@timestamp"=\>{"type"=\>"date"}, "@version"=\>{"type"=\>"keyword"}, "geoip"=\>{"dynamic"=\>true, "properties"=\>{"ip"=\>{"type"=\>"ip"}, "location"=\>{"type"=\>"geo\_point"}, "latitude"=\>{"type"=\>"half\_float"}, "longitude"=\>{"type"=\>"half\_float"}}}}}}}} [2018-07-23T10:14:50,850][INFO][logstash.outputs.elasticsearch] Installing elasticsearch template to \_template/logstash [2018-07-23T10:14:51,782][INFO][logstash.pipeline] Pipeline started successfully {:pipeline\_id=\>"main", :thread=\>"#\"} [2018-07-23T10:14:51,935][INFO][logstash.agent] Pipelines running {:count=\>1, :running\_pipelines=\>[:main], :non\_running\_pipelines=\>[]} [2018-07-23T10:14:52,465][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600} { "bank\_id" =\> 0, "host" =\> "Mettl088", "path" =\> "C:\Users\Revati Chawla\Desktop\folder\viz\_banks.csv", "@version" =\> "1", "message" =\> "PATH=C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Java\jdk1.8.0\_171;C:\Program Files\Java\jre1.8.0\_171;C:\WINDOWS\System32\OpenSSH\;C:\Users\Revati Chawla\AppData\Local\Microsoft\WindowsApps;\r", "@timestamp" =\> 2018-07-23T04:44:52.365Z } ---
**Author:** ![Revati\_Chawla](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/revati_chawla/32/48278_2.png) [@Revati\_Chawla](https://discuss.elastic.co/u/Revati_Chawla)\ **Post date:** [July 23, 2018, 6:49am UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/16 "2018-07-23T06:49:08Z")
Hi I guess I am done. Figured our everything. Thanks a lot both of you. Really appreciate. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 20, 2018, 6:49am UTC](https://discuss.elastic.co/t/unable-to-run-logstash-on-windows-8-1/137787/17 "2018-08-20T06:49:12Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.