Hi Guys,
Good Day!!
I am facing the issue while staring the logstash.
LogStash::ConfigurationError”, :message=>”Expected one of [A-Za-z0-9_-] [ trn], “#”, “{“, [A-Za-z0-9_], “}” at line 49, column 31 (byte 1290) after output {n if “total” in [tags] {n elasticsearch {n index => [“totalexecution_%{indexName}_%{+YYYY}”]n hosts => [“https://ip:9200”, “https://ip:9200”, “https://ip:9200″]n user => elasticn password => Global”, :backtrace=>[“/usr/share/logstash/logstash-core/lib/logstash/compiler.rb:32:in compile_imperative'”, “org/logstash/execution/AbstractPipelineExt.java:183:in initialize'”, “org/logstash/execution/JavaBasePipelineExt.java:69:in initialize'”, “/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:44:in initialize'”, “/usr/share/logstash/logstash-core/lib/logstash/pipeline_action/create.rb:52:in execute'”, “/usr/share/logstash/logstash-core/lib/logstash/agent.rb:357:in block in converge_state'”]}
‘ 1 input { 2 beats { 3 port => “5044” 4 } 5 } 6 7 8 filter { 9 grok { 10 match => {“message” => “%{LOGLEVEL:loglevel} %{NUMBER:tenantId} %{NUMBER:organizationUnitId} %{GREEDYDATA:message}”} 11 overwrite => [“message”] 12 } 13 json { 14 source => “message” 15 } 16 17 if [message] != “” { 18 if “execution ended” in [message] { 19 mutate { add_tag => [“total”] } 20 } 21 if “Info” in [level] or “Warn” in [level] or “Error” in [level] or “Fatal” in [level] { 22 mutate { add_tag => [“default”] } 23 } 24 else { 25 drop {} 26 } 27 } 28 else { 29 if “management_” in [indexName] { 30 mutate { add_tag => [“management”] } 31 } 32 else if “environmentcheck_” in [indexName] { 33 mutate { add_tag => [“environmentcheck”] } 34 } 35 else { 36 mutate { add_tag => [“robotic”] } 37 } 38 } 39 ruby { path => “/etc/logstash/ruby_scripts/index_name_script.rb” } 40 } 43 output { 44 if “total” in [tags] { 45 elasticsearch { 46 index => [“totalexecution_%{indexName}%{+YYYY}”] 47 hosts => [“https://ip:9200”, “https://ip:9200”, “https://ip:9200”] 48 user => elastic 49 password => Changeme@123 50 ssl => true 51 cacert => “/etc/logstash/elasticsearch-ca.pem” 52 } 53 } 54 if “default” in [tags] { 55 elasticsearch { 56 index => [“default%{indexName}%{+YYYY}”] 57 hosts => [“https://ip:9200”, “https://ip:9200”, “https://ip:9200”] 58 user => elastic 59 password => Changeme@123 60 ssl => true 61 cacert => “/etc/logstash/elasticsearch-ca.pem” 62 } 63 } 64 if “management” in [tags] { 65 elasticsearch { 66 index => [“management%{indexName}%{+YYYY.MM}”] 67 hosts => [“”https://ip:9200”, “https://ip:9200”, “https://ip:9200”] 68 user => elastic 69 password => Changeme@123 70 ssl => true 71 cacert => “/etc/logstash/elasticsearch-ca.pem” 72 } 73 } 74 if “robotic” in [tags] { 75 elasticsearch { 76 index => [“robot%{indexName}%{+YYYY.MM}”] 77 hosts => [“https://ip:9200”, “https://ip:9200”, “https://ip:9200”] 78 user => elastic 79 password => Changeme@123 80 ssl => true 81 cacert => “/etc/logstash/elasticsearch-ca.pem” 82 } 83 } 84 if “environmentcheck” in [tags] { 85 elasticsearch { 86 index => [“environmentcheck%{indexName}_%{+YYYY}”] 87 hosts => [“https://ip:9200”, “https://ip:9200”, “https://ip:9200” ] 88 user => elastic 89 password => Changeme@123 90 ssl => true 91 cacert => “/etc/logstash/elasticsearch-ca.pem” 92 } 93 } 94 }`