logstash conf文件 启动报错

filter{

        if([messageTopic] == "minos2_useraction"){

                #       codec=>rubydebug

        mutate{

                split=>["message","     "]

                        add_field => {

                                "eventName" => "%{[message][0]}"

                        }



                        add_field => {

                                "eventId" => "%{[message][1]}"

                        }

                        add_field => {

                                "ruleId" => "%{[message][2]}"

                        }

                        add_field => {

                                "serialNumber" => "%{[message][3]}"

                        }

                        add_field => {

                                "mainBody" => "%{[message][4]}"

                        }

                        add_field => {

                                "ip" => "%{[message][5]}"

                        }

                       



                remove_field => ["message"]



#               if([ip] != "-") {

#                 geoip {

#                   source => "ip"

#                   target => "geoip"

#                }

#              }

        }



#        if([ip] != "-") {

#          geoip {

#            source => "ip"

#            target => "geoip"

#          }

        }