I have installed an ELK Stack log parsing pipeline and I was using ES 2.4, LS 2.4 and Kibana 4, and everything woks fine. Now I am trying to upgrade my Stack into ELK 5.0, unfortunately, I am getting _grokparsefailure and _geoip_lookup_failure on every log line. Here is my LS config file content: …

_grokparsefailure and _geoip_lookup_failure when upgrading to ELK 5.0

system (system) Closed March 21, 2017, 9:15am 4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Grokparsefailure, Geoip lookup failure Logstash	12	4066	August 24, 2018
Netflow w/GeoIP always results in _grokparsefailure Logstash	1	588	March 9, 2017
Help with "_grokparsefailure" and "_geoip_lookup_failure" Logstash	6	368	August 1, 2022
Grokparsefailure, Geoip lookup failure error Logstash	2	657	May 17, 2019
Geoip is not working for pfsense Logstash	2	583	September 14, 2018