Page 1 of 1

Grok module issue in verify config

Posted: Wed Jan 20, 2021 4:25 am
by rhassing
When i verify the config of my logserver I get the following error:

{:timestamp=>"2021-01-20T06:26:00.338000+0100", :message=>"The given configuration is invalid. Reason: Couldn't find any input plugin named 'grok'. Are you sure this is correct? Trying to load the grok input plugin resulted in this error: no such file to load -- logstash/inputs/grok", :level=>:fatal}

If I check the loaded modules in logstash I can see that the module is loaded.

Best regards,
Rob Hassing

Re: Grok module issue in verify config

Posted: Wed Jan 20, 2021 2:27 pm
by cdienger
It sounds like you have a grok filter configured under the Inputs section of NLS. Double check the configuration and move the grok filter to the Filters section instead. Please share a copy of the input file which can be gathered under Configure > Global Config > View > Inputs File if this doesn't help resolve the problem.

Re: Grok module issue in verify config

Posted: Wed Jan 20, 2021 2:52 pm
by rhassing
You were so right. I have totaly missed that.
I entered a filter under the inputs.

Thank you very much.

Best regards,
Rob

Re: Grok module issue in verify config

Posted: Thu Jan 21, 2021 4:35 pm
by cdienger
Glad to help!