Unable to start Logstash

Description

Trying to configure a windows eventlog of logstash and after configuration I get the error below when I try to start Logstash and it fails to start.

Error..

{:timestamp=>"2014-01-14T13:09:51.968000+1100", :message=>"Error: Expected one of #, => at line 9, column 15 (byte 143) after input {\n redis {\n host => \"10.20.1.98\"\n type => \"redis-input\"\n data_type => \"list\"\n key => \"logstash\"\n } \n input {\n eventlog "}

central configuration..

input {
redis {
host => "10.20.1.98"
type => "redis-input"
data_type => "list"
key => "logstash"
}
input {
eventlog {
type => 'Win32-EventLog'
logfile => ["System", "Application", "Security", "Lync Server"]
codec => plain { charset => "UTF-8" }
}
}
}

Gliffy Diagrams

Activity

Show:

Philippe Weber May 16, 2014 at 10:14 AM

Your description and your comment are totally unrelated.
In your description you have an invalid configuration because the input{ string is repeated between redis and eventlog, it should simply be

input { redis {...} eventlog{...} }

Your comment is a charset conversion issue, where you should most probably define the charset config for your input that are not UTF8, plese try latest version of logstash 1.4.x because lot of improvments have been done related to charset handling

Prince Asamoah January 14, 2014 at 5:07 AM

Just gone back to using version 1.2.1 and I'm seeing the conversion errors but it's actually not stopping logstash..

:message=>"Failed to flush outgoing items", :outgoing_count=>5, :exception=>#<Encoding::InvalidByteSequenceError: ""\xDE"" on ASCII-8BIT>, :backtrace=>["org/jruby/RubyString.java:7599:in `encode'", "json/ext/GeneratorMethods.java:71:in `to_json'", "file:/opt/logstash/logstash.jar!/logstash/event.rb:157:in `to_json'", "file:/opt/logstash/logstash.jar!/logstash/outputs/elasticsearch.rb:303:in `flush'", "org/jruby/RubyArray.java:1613:in `each'", "file:/opt/logstash/logstash.jar!/logstash/outputs/elasticsearch.rb:298:in `flush'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:219:in `buffer_flush'", "org/jruby/RubyHash.java:1338:in `each'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:216:in `buffer_flush'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:193:in `buffer_flush'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:112:in `buffer_initialize'", "org/jruby/RubyKernel.java:1519:in `loop'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:110:in `buffer_initialize'"], :level=>:warn}
{:timestamp=>"2014-01-14T16:05:46.977000+1100", :message=>"Failed to flush outgoing items", :outgoing_count=>5, :exception=>#<Encoding::InvalidByteSequenceError: ""\xDE"" on ASCII-8BIT>, :backtrace=>["org/jruby/RubyString.java:7599:in `encode'", "json/ext/GeneratorMethods.java:71:in `to_json'", "file:/opt/logstash/logstash.jar!/logstash/event.rb:157:in `to_json'", "file:/opt/logstash/logstash.jar!/logstash/outputs/elasticsearch.rb:303:in `flush'", "org/jruby/RubyArray.java:1613:in `each'", "file:/opt/logstash/logstash.jar!/logstash/outputs/elasticsearch.rb:298:in `flush'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:219:in `buffer_flush'", "org/jruby/RubyHash.java:1338:in `each'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:216:in `buffer_flush'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:193:in `buffer_flush'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:112:in `buffer_initialize'", "org/jruby/RubyKernel.java:1519:in `loop'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:110:in `buffer_initialize'"], :level=>:warn}

Details

Assignee

Reporter

Labels

Affects versions

Created January 14, 2014 at 2:19 AM
Updated May 16, 2014 at 10:14 AM