Your settings are invalid. Reason: Setting "" doesn't exist. Please check if you haven't made a typo

Elastic Stack Logstash
1

Hi guys, I'm trying to write the config file for logstash to communicate with splunk and I keep getting this error. Not sure what I'm doing wrong and could use some input.

This is my first time using it so here's the config:

input {
  beats {
    port => 5044
  }
}

output {
  http {
    url => "https://126.0.0.1:8088"
    http_method => "post"
    format => "json"
    headers => {
      "Authorization" => "Splunk 81e474c9-2584-4e99-b6d1-d1964daef81x"
    }
  }
}
2

That error suggests an issue in logstash.yml. What do you have in that file?

3

Oh I'm an idiot, I had edited the file originally because I assumed it was the config file, once I realized it wasn't, I deleted everything I put but it left a blank line at the end and that's what was causing it. Thanks!