Unable to start Logstash

Description

Trying to configure a windows eventlog of logstash and after configuration I get the error below when I try to start Logstash and it fails to start.

Error..

{:timestamp=>"2014-01-14T13:09:51.968000+1100", :message=>"Error: Expected one of #, => at line 9, column 15 (byte 143) after input {\n redis {\n host => \"10.20.1.98\"\n type => \"redis-input\"\n data_type => \"list\"\n key => \"logstash\"\n } \n input {\n eventlog "}

central configuration..

input {
redis {
host => "10.20.1.98"
type => "redis-input"
data_type => "list"
key => "logstash"
}
input {
eventlog {
type => 'Win32-EventLog'
logfile => ["System", "Application", "Security", "Lync Server"]
codec => plain { charset => "UTF-8" }
}
}
}

Activity

Show:
Prince Asamoah
January 14, 2014, 5:07 AM

Just gone back to using version 1.2.1 and I'm seeing the conversion errors but it's actually not stopping logstash..

:message=>"Failed to flush outgoing items", :outgoing_count=>5, :exception=>#<Encoding::InvalidByteSequenceError: ""\xDE"" on ASCII-8BIT>, :backtrace=>["org/jruby/RubyString.java:7599:in `encode'", "json/ext/GeneratorMethods.java:71:in `to_json'", "file:/opt/logstash/logstash.jar!/logstash/event.rb:157:in `to_json'", "file:/opt/logstash/logstash.jar!/logstash/outputs/elasticsearch.rb:303:in `flush'", "org/jruby/RubyArray.java:1613:in `each'", "file:/opt/logstash/logstash.jar!/logstash/outputs/elasticsearch.rb:298:in `flush'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:219:in `buffer_flush'", "org/jruby/RubyHash.java:1338:in `each'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:216:in `buffer_flush'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:193:in `buffer_flush'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:112:in `buffer_initialize'", "org/jruby/RubyKernel.java:1519:in `loop'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:110:in `buffer_initialize'"], :level=>:warn}
{:timestamp=>"2014-01-14T16:05:46.977000+1100", :message=>"Failed to flush outgoing items", :outgoing_count=>5, :exception=>#<Encoding::InvalidByteSequenceError: ""\xDE"" on ASCII-8BIT>, :backtrace=>["org/jruby/RubyString.java:7599:in `encode'", "json/ext/GeneratorMethods.java:71:in `to_json'", "file:/opt/logstash/logstash.jar!/logstash/event.rb:157:in `to_json'", "file:/opt/logstash/logstash.jar!/logstash/outputs/elasticsearch.rb:303:in `flush'", "org/jruby/RubyArray.java:1613:in `each'", "file:/opt/logstash/logstash.jar!/logstash/outputs/elasticsearch.rb:298:in `flush'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:219:in `buffer_flush'", "org/jruby/RubyHash.java:1338:in `each'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:216:in `buffer_flush'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:193:in `buffer_flush'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:112:in `buffer_initialize'", "org/jruby/RubyKernel.java:1519:in `loop'", "file:/opt/logstash/logstash.jar!/stud/buffer.rb:110:in `buffer_initialize'"], :level=>:warn}

Philippe Weber
May 16, 2014, 10:14 AM

Your description and your comment are totally unrelated.
In your description you have an invalid configuration because the input{ string is repeated between redis and eventlog, it should simply be

Your comment is a charset conversion issue, where you should most probably define the charset config for your input that are not UTF8, plese try latest version of logstash 1.4.x because lot of improvments have been done related to charset handling

Assignee

Logstash Developers

Reporter

Prince Asamoah

Labels

Affects versions

Configure