# Unable to start logstash. The same configuration works in another node and index is created

**URL:** <https://discuss.elastic.co/t/unable-to-start-logstash-the-same-configuration-works-in-another-node-and-index-is-created/226519>\
**Category:** Logstash\
**Created:** [April 4, 2020, 3:15pm UTC](https://discuss.elastic.co/t/unable-to-start-logstash-the-same-configuration-works-in-another-node-and-index-is-created/226519 "2020-04-04T15:15:30Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ranjini](https://avatars.discourse-cdn.com/v4/letter/r/898d66/32.png) [@ranjini](https://discuss.elastic.co/u/ranjini)\
**Post date:** [April 4, 2020, 3:15pm UTC](https://discuss.elastic.co/t/unable-to-start-logstash-the-same-configuration-works-in-another-node-and-index-is-created/226519/1 "2020-04-04T15:15:30Z")

</div>

Logstash configuration works fine when output is tested with

output {  
stdout { codec =\> rubydebug }  
}  
when sent to ES it errors out.  
`input {  
file {  
path =\> "/opt/tomcat/logs/ds.log"  
start\_position =\> "beginning"  
type =\> "ds"  
codec =\> multiline {  
pattern =\> "^%{TIMESTAMP\_ISO8601}"  
negate =\> true  
what =\> "previous"  
}  
}  
}

filter {  
if [type] == "ds" {  
mutate {  
gsub =\> ["message", "r", ""]  
}  
grok {  
match =\> {  
"message" =\> [  
"^%{TIMESTAMP\_ISO8601:logtimestamp},%{INT:millis} %{WORD:loglevel} [%{GREEDYDATA:thread}] %{GREEDYDATA:message}%{SPACE} - %{GREEDYDATA:exceptionmessage}",  
"^%{TIMESTAMP\_ISO8601:logtimestamp},%{INT:millis} %{WORD:loglevel} [%{GREEDYDATA:thread}] [%{DATA:status}] %{GREEDYDATA:message}%{SPACE} - %{GREEDYDATA:exceptionmessage}"  
]  
overwrite =\> ["message"]  
}  
}

```
date {
	match => ["logtimetimestamp" , "yyyy-MM-dd HH:mm:ss,SSS"]
}
}

```

}

output {  
amazon\_es {  
hosts =\> ["\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*/"]  
region =\> "us-west-2"  
index =\> "test-messages-%{+YYYY.MM.dd}"  
}  
}

`error "usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_amazon_es_minus_7_dot_0_dot_1_minus_java.lib.logstash.outputs.amazon_es.http_client.build_adapter(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-amazon_es-7.0.1-java/lib/logstash/outputs/amazon_es/http_client.rb:284)", "usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_amazon_es_minus_7_dot_0_dot_1_minus_java.lib.logstash.outputs.amazon_es.http_client.RUBY$method$build_adapter$0$ __VARARGS__ (usr/share/logstash/vendor/bundle/jruby/$2_dot_5_dot_0/gems/logstash_minus_output_minus_amazon_es_minus_7_dot_0_dot_1_minus_java/lib/logstash/outputs/amazon_es//usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-amazon_es-7.0.1-java/lib/logstash/outputs/amazon_es/http_client.rb)", "usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_amazon_es_minus_7_dot_0_dot_1_minus_java.lib.logstash.outputs.amazon_es.http_client.build_pool(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-amazon_es-7.0.1-java/lib/logstash/outputs/amazon_es/http_client.rb:288)", "usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_amazon_es_minus_7_dot_0_dot_1_minus_java.lib.logstash.outputs.amazon_es.http_client.RUBY$method$build_pool$0$ __VARARGS__ (usr/share/logstash/vendor/bundle/jruby/$2_dot_5_dot_0/gems/logstash_minus_output_minus_amazon_es_minus_7_dot_0_dot_1_minus_java/lib/logstash/outputs/amazon_es//usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-amazon_es-7.0.1-java/lib/logstash/outputs/amazon_es/http_client.rb)", "usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_amazon_es_minus_7_dot_0_dot_1_minus_java.lib.logstash.outputs.amazon_es.http_client.initialize(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-amazon_es-7.0.1-java/lib/logstash/outputs/amazon_es/http_client.rb:54)", "org.jruby.RubyClass.newInstance(org/jruby/RubyClass.java:915)", "org.jruby.RubyClass$INVOKER$i$newInstance.call(org/jruby/RubyClass$INVOKER$i$newInstance.gen)", "usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_amazon_es_minus_7_dot_0_dot_1_minus_java.lib.logstash.outputs.amazon_es.http_client_builder.create_http_client(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-amazon_es-7.0.1-java/lib/logstash/outputs/amazon_es/http_client_builder.rb:110)", "usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_amazon_es_minus_7_dot_0_dot_1_minus_java.lib.logstash.outputs.amazon_es.http_client_builder.RUBY$method$create_http_client$0$ __VARARGS__ (usr/share/logstash/vendor/bundle/jruby/$2_dot_5_dot_0/gems/logstash_minus_output_minus_amazon_es_minus_7_dot_0_dot_1_minus_java/lib/logstash/outputs/amazon_es//usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-amazon_es-7.0.1-java/lib/logstash/outputs/amazon_es/http_client_builder.rb)", "usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_amazon_es_minus_7_dot_0_dot_1_minus_java.lib.logstash.outputs.amazon_es.http_client_builder.build(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-amazon_es-7.0.1-java/lib/logstash/outputs/amazon_es/http_client_builder.rb:98)", "usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_amazon_es_minus_7_dot_0_dot_1_minus_java.lib.logstash.outputs.amazon_es.http_client_builder.RUBY$method$build$0$ __VARARGS__ (usr/share/logstash/vendor/bundle/jruby/$2_dot_5_dot_0/gems/logstash_minus_output_minus_amazon_es_minus_7_dot_0_dot_1_minus_java/lib/logstash/outputs/amazon_es//usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-amazon_es-7.0.1-java/lib/logstash/outputs/amazon_es/http_client_builder.rb)", "usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_amazon_es_minus_7_dot_0_dot_1_minus_java.lib.logstash.outputs.amazon_es.build_client(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-amazon_es-7.0.1-java/lib/logstash/outputs/amazon_es.rb:256)", "usr.share.logstash.logstash_minus_core.lib.logstash.java_pipeline.start_workers(/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:203)", "usr.share.logstash.logstash_minus_core.lib.logstash.java_pipeline.RUBY$method$start_workers$0$ __VARARGS__ (usr/share/logstash/logstash_minus_core/lib/logstash//usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb)", "usr.share.logstash.logstash_minus_core.lib.logstash.java_pipeline.run(/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:145)", "usr.share.logstash.logstash_minus_core.lib.logstash.java_pipeline.RUBY$method$run$0$ __VARARGS__ (usr/share/logstash/logstash_minus_core/lib/logstash//usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb)", "usr.share.logstash.logstash_minus_core.lib.logstash.java_pipeline.start(/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:104)", "org.jruby.RubyProc.call(org/jruby/RubyProc.java:295)", "org.jruby.RubyProc.call(org/jruby/RubyProc.java:274)", "org.jruby.RubyProc.call(org/jruby/RubyProc.java:270)", "java.lang.Thread.run(java/lang/Thread.java:745)"], :thread=>"#<Thread:0x5a119184 run>"} [ERROR] 2020-04-04 14:37:21.917 [Converge PipelineAction::Create<main>] agent - Failed to execute action {:id=>:main, :action_type=>LogStash::ConvergeResult::FailedAction, :message=>"Could not execute action: PipelineAction::Create<main>, action_result: false", :backtrace=>nil} [INFO] 2020-04-04 14:37:22.220 [Api Webserver] agent - Successfully started Logstash API endpoint {:port=>9600} [INFO] 2020-04-04 14:37:27.199 [LogStash::Runner] runner - Logstash shut down.`  
` Please find the log and conf`P`attached.

Appreciate your help.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 2, 2020, 3:15pm UTC](https://discuss.elastic.co/t/unable-to-start-logstash-the-same-configuration-works-in-another-node-and-index-is-created/226519/2 "2020-05-02T15:15:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
