# Using logstash with elasticsearch for IIS log files Error Failled to execute action Pipeline ConfigurationError **URL:** \ **Category:** Logstash\ **Created:** [August 28, 2018, 5:18am UTC](https://discuss.elastic.co/t/using-logstash-with-elasticsearch-for-iis-log-files-error-failled-to-execute-action-pipeline-configurationerror/146266 "2018-08-28T05:18:36Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![anwarshahtarn](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anwarshahtarn/32/34821_2.png) [@anwarshahtarn](https://discuss.elastic.co/u/anwarshahtarn)\ **Post date:** [August 28, 2018, 5:18am UTC](https://discuss.elastic.co/t/using-logstash-with-elasticsearch-for-iis-log-files-error-failled-to-execute-action-pipeline-configurationerror/146266/1 "2018-08-28T05:18:36Z")
Microsoft Windows [Version 6.1.7601] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\Users\Wahab\>cd C:\Program Files\Elastic\logstash-6.4.0\logstash-6.4.0\bin\nss m-2.24\win64 C:\Program Files\Elastic\logstash-6.4.0\logstash-6.4.0\bin\nssm-2.24\win64\>nssm. exe install Logstash Service "Logstash" installed successfully! C:\Program Files\Elastic\logstash-6.4.0\logstash-6.4.0\bin\nssm-2.24\win64\>cd C: \Program Files\Elastic\logstash-6.4.0\logstash-6.4.0\bin C:\Program Files\Elastic\logstash-6.4.0\logstash-6.4.0\bin\>logstash.bat -f ..\co nf Sending Logstash logs to C:/Program Files/Elastic/logstash-6.4.0/logstash-6.4.0/ logs which is now configured via log4j2.properties [2018-08-28T07:55:03,743][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified [2018-08-28T07:55:04,820][INFO][logstash.runner] Starting Logstash {" logstash.version"=\>"6.4.0"} [2018-08-28T07:55:04,934][INFO][logstash.config.source.local.configpathloader] No config files found in path {:path=\>"C:/Program Files/Elastic/logstash-6.4.0/l ogstash-6.4.0/conf"} [2018-08-28T07:55:04,948][ERROR][logstash.config.sourceloader] No configuration found in the configured sources. [2018-08-28T07:55:05,908][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600} C:\Program Files\Elastic\logstash-6.4.0\logstash-6.4.0\bin\>cd C:\Program Files\E lastic\logstash-6.4.0\logstash-6.4.0\config C:\Program Files\Elastic\logstash-6.4.0\logstash-6.4.0\config\>logstash -f iis\_w3 c\_logs.conf 'logstash' is not recognized as an internal or external command, operable program or batch file. C:\Program Files\Elastic\logstash-6.4.0\logstash-6.4.0\config\>cd C:\Program File s\Elastic\logstash-6.4.0\logstash-6.4.0\bin C:\Program Files\Elastic\logstash-6.4.0\logstash-6.4.0\bin\>logstash -f iis\_w3c\_l ogs.conf Sending Logstash logs to C:/Program Files/Elastic/logstash-6.4.0/logstash-6.4.0/ logs which is now configured via log4j2.properties [2018-08-28T09:40:54,282][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified [2018-08-28T09:40:54,965][INFO][logstash.runner] Starting Logstash {" logstash.version"=\>"6.4.0"} [2018-08-28T09:40:55,543][ERROR][logstash.agent] Failed to execute ac tion {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"L ogStash::ConfigurationError", :message=\>"Expected one of #, =\> at line 9, column 6 (byte 149) after input {\n file {\n type =\> "iis\_log\_1"\n path =\> [ "C:/inetpub/logs/LogFiles/W3SVC1/\*.log"]\n start\_position =\> "beginning"\n }\n\nfilter {\n if ", :backtrace=\>["C:/Program Files/Elastic/logstash-6.4.0/l ogstash-6.4.0/logstash-core/lib/logstash/compiler.rb:41:in `compile_imperative'" , "C:/Program Files/Elastic/logstash-6.4.0/logstash-6.4.0/logstash-core/lib/logs tash/compiler.rb:49:in`compile\_graph'", "C:/Program Files/Elastic/logstash-6.4. 0/logstash-6.4.0/logstash-core/lib/logstash/compiler.rb:11:in `block in compile_ sources'", "org/jruby/RubyArray.java:2486:in`map'", "C:/Program Files/Elastic/l ogstash-6.4.0/logstash-6.4.0/logstash-core/lib/logstash/compiler.rb:10:in `compi le_sources'", "org/logstash/execution/AbstractPipelineExt.java:157:in`initializ e'", "C:/Program Files/Elastic/logstash-6.4.0/logstash-6.4.0/logstash-core/lib/l ogstash/pipeline.rb:22:in `initialize'", "C:/Program Files/Elastic/logstash-6.4. 0/logstash-6.4.0/logstash-core/lib/logstash/pipeline.rb:90:in`initialize'", "C: /Program Files/Elastic/logstash-6.4.0/logstash-6.4.0/logstash-core/lib/logstash/ pipeline\_action/create.rb:38:in `execute'", "C:/Program Files/Elastic/logstash-6 .4.0/logstash-6.4.0/logstash-core/lib/logstash/agent.rb:309:in`block in converg e\_state'"]} [2018-08-28T09:40:55,964][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600} ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [August 28, 2018, 7:36am UTC](https://discuss.elastic.co/t/using-logstash-with-elasticsearch-for-iis-log-files-error-failled-to-execute-action-pipeline-configurationerror/146266/2 "2018-08-28T07:36:14Z")
There's a syntax error in your configuration file. It looks like there's a missing `}` after the file input. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [September 25, 2018, 7:36am UTC](https://discuss.elastic.co/t/using-logstash-with-elasticsearch-for-iis-log-files-error-failled-to-execute-action-pipeline-configurationerror/146266/3 "2018-09-25T07:36:36Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.