Logstash: Cannot create pipeline {:reason=>"Expected one of #

[GavinChowUp]

Cannot create pipeline {:reason=>"Expected one of #

• Version: 5.6.2
• Operating System: OSX

I am new study Logstash, when i start with ".conf",it is always hava an error in the log:
[2017-10-13T09:29:53,906][INFO ][logstash.modules.scaffold] Initializing module {:module_name=>"fb_apache", :directory=>"/usr/share/logstash/modules/fb_apache/configuration"}
[2017-10-13T09:29:53,909][INFO ][logstash.modules.scaffold] Initializing module {:module_name=>"netflow", :directory=>"/usr/share/logstash/modules/netflow/configuration"}
[2017-10-13T09:29:54,092][ERROR][logstash.agent ] Cannot create pipeline {:reason=>"Expected one of #, => at line 3, column 11 (byte 29) after input {\n stdin {\n codec "}

my "stdin.conf" is :

input {
stdin {
codec = >'plain'
}
}
output {
stdout {}

}

if I reduce the "codec=> 'plain' "
it works ;

[jordansissel]

White space between = and > is not valid. Could we make the error message
better?

On Thu, Oct 12, 2017 at 6:45 PM GavinChowUp [e-mail]
wrote:

Cannot create pipeline {:reason=>"Expected one of #

• Version: 5.6.2
• Operating System: OSX

I am new study Logstash, when i start with ".conf",it is always hava an
error in the log:
[2017-10-13T09:29:53,906][INFO ][logstash.modules.scaffold] Initializing
module {:module_name=>"fb_apache",
:directory=>"/usr/share/logstash/modules/fb_apache/configuration"}
[2017-10-13T09:29:53,909][INFO ][logstash.modules.scaffold] Initializing
module {:module_name=>"netflow",
:directory=>"/usr/share/logstash/modules/netflow/configuration"}
[2017-10-13T09:29:54,092][ERROR][logstash.agent ] Cannot create pipeline
{:reason=>"Expected one of #, => at line 3, column 11 (byte 29) after input
{\n stdin {\n codec "}
my "stdin.conf" is : input {
stdin {
codec = >'plain'
}
}
output {
stdout {}
}

if I reduce the "codec=> 'plain' "
it works ;

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/elastic/logstash/issues/8489, or mute the thread
https://github.com/notifications/unsubscribe-auth/AAIC6oQYgFe1GPBTthFTnPaXpUfCYwlFks5srsDCgaJpZM4P33M-
.

[geekyouth]

you should use:

···
output {
elasticsearch {
hosts => "192.168.137.133:9200"
index => "local-logs-%{type}-%{+YYYY-MM-dd}"
user => logstash
password => "logstash"
ssl => false
ssl_certificate_verification => true
truststore => "/app/logstash-5.6.4/config/truststore.jks"
truststore_password => "ELK-2018"
}
}
···
use "value"

使用双引号包裹字符值