# Using mapping template from {:path=\>nil}

**URL:** <https://discuss.elastic.co/t/using-mapping-template-from-path-nil/121694>\
**Category:** Logstash\
**Created:** [February 27, 2018, 4:20pm UTC](https://discuss.elastic.co/t/using-mapping-template-from-path-nil/121694 "2018-02-27T16:20:14Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![vaishali1](https://avatars.discourse-cdn.com/v4/letter/v/f05b48/32.png) [@vaishali1](https://discuss.elastic.co/u/vaishali1)\
**Post date:** [February 27, 2018, 4:20pm UTC](https://discuss.elastic.co/t/using-mapping-template-from-path-nil/121694/1 "2018-02-27T16:20:14Z")

</div>

Hi,  
I am facing some issue in importing a data through Logstash

input  
{  
file  
{  
path =\>"C:\Users\328347935\Downloads\EKL\logstash-6.2.2\mocklog.log"  
start\_position =\> "beginning"  
codec =\> "plain"  
}  
}

filter  
{  
grok  
{  
match =\>{"message" =\> "%{NUMBER:field\_number:int}\s+(?\<first\_name\>\S+)\s+(?\<last\_name\>\S+)\s(?\<email\_address\>\S+)\s(?\S+)\s(?\S+)"}  
}  
}

output  
{  
elasticsearch  
{  
hosts =\> "[http://localhost:9200](http://localhost:9200)"  
index =\>"test"  
}  
stdout{}  
}

**And I am getting an error like:**

[2018-02-27T11:14:33,253][INFO][logstash.outputs.elasticsearch] Elasticsearch pool URLs updated {:changes=\>{:removed=\>[  
], :added=\>[[http://localhost:9200/](http://localhost:9200/)]}}  
[2018-02-27T11:14:33,263][INFO][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connect  
ion is working {:healthcheck\_url=\>[http://localhost:9200/](http://localhost:9200/), :path=\>"/"}  
[2018-02-27T11:14:33,439][WARN][logstash.outputs.elasticsearch] Restored connection to ES instance {:url=\>"[http://local](http://local)  
host:9200/"}  
[2018-02-27T11:14:33,487][INFO][logstash.outputs.elasticsearch] ES Output version determined {:es\_version=\>nil}  
[2018-02-27T11:14:33,494][WARN][logstash.outputs.elasticsearch] Detected a 6.x and above cluster: the `type` event fiel  
d won't be used to determine the document \_type {:es\_version=\>6}  
[2018-02-27T11:14:33,513][INFO][logstash.outputs.elasticsearch] Using mapping template from {:path=\>nil}  
[2018-02-27T11:14:33,538][INFO][logstash.outputs.elasticsearch] Attempting to install template {:manage\_template=\>{"tem  
plate"=\>"logstash-_", "version"=\>60001, "settings"=\>{"index.refresh\_interval"=\>"5s"}, "mappings"=\>{"default"=\>{"dynami  
c\_templates"=\>[{"message\_field"=\>{"path\_match"=\>"message", "match\_mapping\_type"=\>"string", "mapping"=\>{"type"=\>"text", "  
norms"=\>false}}}, {"string\_fields"=\>{"match"=\>"_", "match\_mapping\_type"=\>"string", "mapping"=\>{"type"=\>"text", "norms"=\>  
false, "fields"=\>{"keyword"=\>{"type"=\>"keyword", "ignore\_above"=\>256}}}}}], "properties"=\>{"@timestamp"=\>{"type"=\>"date"  
}, "@version"=\>{"type"=\>"keyword"}, "geoip"=\>{"dynamic"=\>true, "properties"=\>{"ip"=\>{"type"=\>"ip"}, "location"=\>{"type"=

> "geo\_point"}, "latitude"=\>{"type"=\>"half\_float"}, "longitude"=\>{"type"=\>"half\_float"}}}}}}}}  
> [2018-02-27T11:14:33,587][INFO][logstash.outputs.elasticsearch] New Elasticsearch output {:class=\>"LogStash::Outputs::E  
> lasticSearch", :hosts=\>["[http://localhost:9200](http://localhost:9200)"]}  
> [2018-02-27T11:14:34,475][INFO][logstash.pipeline] Pipeline started succesfully {:pipeline\_id=\>"main", :thread=  
> "#\<Thread:0x573dfd46 run\>"}  
> [2018-02-27T11:14:34,637][INFO][logstash.agent] Pipelines running {:count=\>1, :pipelines=\>["main"]}

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [February 27, 2018, 4:53pm UTC](https://discuss.elastic.co/t/using-mapping-template-from-path-nil/121694/2 "2018-02-27T16:53:55Z")

</div>

> [@vaishali1](#):
>
> I am getting an error

There is no error there. There is a WARN that can be ignored, but no error. What is the problem?

---

<div class="post-metadata">

**Author:** ![vaishali1](https://avatars.discourse-cdn.com/v4/letter/v/f05b48/32.png) [@vaishali1](https://discuss.elastic.co/u/vaishali1)\
**Post date:** [February 27, 2018, 4:56pm UTC](https://discuss.elastic.co/t/using-mapping-template-from-path-nil/121694/3 "2018-02-27T16:56:32Z")

</div>

Path is said to be **nill**  
but i set the file path where the text data is

[2018-02-27T11:14:33,253][INFO][logstash.outputs.elasticsearch] Elasticsearch pool URLs updated {:changes=\>{:removed=\>[  
], :added=\>[[http://localhost:9200/](http://localhost:9200/)]}}  
[2018-02-27T11:14:33,263][INFO][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connect  
ion is working {:healthcheck\_url=\>[http://localhost:9200/](http://localhost:9200/), :path=\>"/"}  
[2018-02-27T11:14:33,439][WARN][logstash.outputs.elasticsearch] Restored connection to ES instance {:url=\>"[http://local](http://local)  
host:9200/"}  
[2018-02-27T11:14:33,487][INFO][logstash.outputs.elasticsearch] ES Output version determined {:es\_version=\>nil}  
[2018-02-27T11:14:33,494][WARN][logstash.outputs.elasticsearch] Detected a 6.x and above cluster: the type event fiel  
d won't be used to determine the document \_type {:es\_version=\>6}  
[2018-02-27T11:14:33,513][INFO][logstash.outputs.elasticsearch] **Using mapping template from {:path=\>nil}**  
[2018-02-27T11:14:33,538][INFO][logstash.outputs.elasticsearch] Attempting to install template {:manage\_template=\>{"tem  
plate"=\>"logstash-", "version"=\>60001, "settings"=\>{"index.refresh\_interval"=\>"5s"}, "mappings"=\>{"default"=\>{"dynami  
c\_templates"=\>[{"message\_field"=\>{"path\_match"=\>"message", "match\_mapping\_type"=\>"string", "mapping"=\>{"type"=\>"text", "  
norms"=\>false}}}, {"string\_fields"=\>{"match"=\>"", "match\_mapping\_type"=\>"string", "mapping"=\>{"type"=\>"text", "norms"=\>  
false, "fields"=\>{"keyword"=\>{"type"=\>"keyword", "ignore\_above"=\>256}}}}}], "properties"=\>{"@timestamp"=\>{"type"=\>"date"  
}, "@version"=\>{"type"=\>"keyword"}, "geoip"=\>{"dynamic"=\>true, "properties"=\>{"ip"=\>{"type"=\>"ip"}, "location"=\>{"type"=

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [February 27, 2018, 5:02pm UTC](https://discuss.elastic.co/t/using-mapping-template-from-path-nil/121694/4 "2018-02-27T17:02:27Z")

</div>

> [@vaishali1](#):
>
> [logstash.outputs.elasticsearch] Using mapping template from {:path=\>nil}

That is telling you that you did not provide the template configuration option on your elasticsearch output, so it is using the compiled-in default. It is a non-issue.

---

<div class="post-metadata">

**Author:** ![vaishali1](https://avatars.discourse-cdn.com/v4/letter/v/f05b48/32.png) [@vaishali1](https://discuss.elastic.co/u/vaishali1)\
**Post date:** [February 27, 2018, 5:09pm UTC](https://discuss.elastic.co/t/using-mapping-template-from-path-nil/121694/5 "2018-02-27T17:09:22Z")

</div>

Thank you,  
Can you please help me out?

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [February 27, 2018, 5:20pm UTC](https://discuss.elastic.co/t/using-mapping-template-from-path-nil/121694/6 "2018-02-27T17:20:24Z")

</div>

> [@vaishali1](#):
>
> Can you please help me out?

If you can explain what problem or issue you are facing then someone may be able to help. The log you showed looks normal. You said you are "facing some issue" but have not explained what the issue is.

---

<div class="post-metadata">

**Author:** ![vaishali1](https://avatars.discourse-cdn.com/v4/letter/v/f05b48/32.png) [@vaishali1](https://discuss.elastic.co/u/vaishali1)\
**Post date:** [February 27, 2018, 5:25pm UTC](https://discuss.elastic.co/t/using-mapping-template-from-path-nil/121694/7 "2018-02-27T17:25:15Z")

</div>

I am so sorry.  
The issue is I can't see the data in Kibana. I am very sure the problem is in output

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [February 27, 2018, 5:29pm UTC](https://discuss.elastic.co/t/using-mapping-template-from-path-nil/121694/8 "2018-02-27T17:29:36Z")

</div>

> [@vaishali1](#):
>
> The issue is I can't see the data in Kibana.

I suggest you adjust the stdout output to be "stdout { codec =\> rubydebug }" and then post what you get on stdout when it reads a line from the file.

Alternatively, have you defined an index pattern that matches "test" (the index you are writing to)? If so, what do you see in the Discover panel in Kibana when viewing data in that index pattern?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 27, 2018, 5:29pm UTC](https://discuss.elastic.co/t/using-mapping-template-from-path-nil/121694/9 "2018-03-27T17:29:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
