# 5.6 fundamentally broken

**URL:** https://discuss.elastic.co/t/5-6-fundamentally-broken/102640
**Category:** Logstash
**Created:** [October 4, 2017, 2:33am UTC](https://discuss.elastic.co/t/5-6-fundamentally-broken/102640 "2017-10-04T02:33:39Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Sjaak01](https://avatars.discourse-cdn.com/v4/letter/s/73ab20/32.png) [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)
#### Post date: [October 4, 2017, 2:33am UTC](https://discuss.elastic.co/t/5-6-fundamentally-broken/102640/1 "2017-10-04T02:33:39Z")

</div>

I don't know if this is logstash or elastic but 5.6 and 5.4 to some extent are fundamentally broken.

On 5.4 I can't get the KV filter to create any mapping. Opened a topic but no solution.

> [@KV field\_split prevents logstash ingesting data](https://discuss.elastic.co/t/kv-field-split-prevents-logstash-ingesting-data/100434/18):
>
> The fields in the mapping only matches some of your fields. If you enable the kv parsing and alter the elasticsearch output to write to a new index, does any data get inserted then? If so, what does the mappings look like? You could also try to write records to a file using a json\_lines codec. This would allow you to inspect the data and see if there are any fields that are generated and might cause a mapping conflict.

On 5.6 the netflow codec and KV filter are both broken. Logstash and Elastic are running without errors but no data is sent to Elastic.

> [@5.6.1 Netflow not working](https://discuss.elastic.co/t/5-6-1-netflow-not-working/101923):
>
> Hi, I've updated from 5.4 to 5.6.1 so I could use the latest netflow codec with support for Fortigate devices but now I got no netflow data coming in anymore. I did not change the config and logstash log shows no errors. config input { udp { port =\> 9995 type =\> "netflow" codec =\> netflow { } } } filter { mutate { add\_field =\> { "[netflow][ipv4\_dst\_host]" =\> "%{[netflow][ipv4\_dst\_addr]}" "[netflow][ipv4\_src\_host]" =\> "%{[netflow][ipv4\_src\_addr]}" } } if…

This is not a problem with my configs, on 5.4 netflow works and stdout shows no problems with the KV filter. On 5.6.1 and 5.6.2 nothing works, its totally dead. No changes to the system or the configs.

I'm running Ubuntu 16.04 inside virtualbox.

Everything appears to be running, no errors anywhere but for whatever reason no data shows up. I have no clue how to proceed and am about to give up on this.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 1, 2017, 2:34am UTC](https://discuss.elastic.co/t/5-6-fundamentally-broken/102640/2 "2017-11-01T02:34:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
