# Autodetection is not working in ELK 6.2.3

**URL:** <https://discuss.elastic.co/t/autodetection-is-not-working-in-elk-6-2-3/130224>\
**Category:** Logstash\
**Created:** [May 2, 2018, 10:06am UTC](https://discuss.elastic.co/t/autodetection-is-not-working-in-elk-6-2-3/130224 "2018-05-02T10:06:11Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![DSak](https://avatars.discourse-cdn.com/v4/letter/d/f1d935/32.png) [@DSak](https://discuss.elastic.co/u/DSak)\
**Post date:** [May 2, 2018, 10:06am UTC](https://discuss.elastic.co/t/autodetection-is-not-working-in-elk-6-2-3/130224/1 "2018-05-02T10:06:12Z")

</div>

Hello,

On Linux, autodetection property is not working for version 6.2.3? The same property is working fine with windows. Also, we are playing with csv & JSON object. Same is working fine with version 5.6.3. Can somebody help me out in this?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [May 2, 2018, 1:26pm UTC](https://discuss.elastic.co/t/autodetection-is-not-working-in-elk-6-2-3/130224/2 "2018-05-02T13:26:29Z")

</div>

Autodetection of what?

---

<div class="post-metadata">

**Author:** ![DSak](https://avatars.discourse-cdn.com/v4/letter/d/f1d935/32.png) [@DSak](https://discuss.elastic.co/u/DSak)\
**Post date:** [May 3, 2018, 5:38am UTC](https://discuss.elastic.co/t/autodetection-is-not-working-in-elk-6-2-3/130224/3 "2018-05-03T05:38:57Z")

</div>

Autodetection of columns that come as a input to me from csv file.

My code of autodetection is as follows,

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

csv {   
separator =\> "|"  
#File,Offset,SystemTimestamp,TimeZone,SAPSystemID,InstanceNumber,Client,UserID,InstanceName,WorkProcessID,ProcessNo.,MessageID,ProgramName,TCode,TCodeDescription,MessageText,Category,ProcessID,Session,Package,Terminal,SysLogtype,VariableData,TransactionID,OverallContexID,ConnectionID,CallCounter,Message,Function,Reason,Program,Line,ProcessDesc,Class,ProblemClass,UserDetail  
#columns =\> ["File","Offset","SystemTimestamp","TimeZone","SAPSystemID","InstanceNumber","Client","UserID","InstanceName","WorkProcessID","ProcessNo.","MessageID","ProgramName","TCode","TCodeDescription","MessageText","Category","ProcessID","Session","Package","Terminal","SysLogtype","VariableData","TransactionID","OverallContexID","ConnectionID","CallCounter","Message","Function","Reason","Program","Line","ProcessDesc","Class","ProblemClass","UserDetail"]  
#columns =\> ["SystemTimestamp","TimeZone","SAPSystemID","InstanceNumber","InstanceName","Client","UserID","Action","ActionUserID","OldValue","OldValueText","NewValue","NewValueText","StartDate","EndDate","TCode","TCodeDescription","UserDetail","IPAddress","HostName"]  
**autodetect\_column\_names =\> true**  
}

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

---

<div class="post-metadata">

**Author:** ![DSak](https://avatars.discourse-cdn.com/v4/letter/d/f1d935/32.png) [@DSak](https://discuss.elastic.co/u/DSak)\
**Post date:** [May 3, 2018, 12:26pm UTC](https://discuss.elastic.co/t/autodetection-is-not-working-in-elk-6-2-3/130224/4 "2018-05-03T12:26:17Z")

</div>

Today, I have checked 'autodetect\_column\_names' on RedHat7 & on mint os but both the times I have faced '\_csvparsefailure' error. It works fines with a windows machine.

We have tested same logstash configuration with logstash version 5.6.3 and it works (on RedHat, windows & mint os).

Want to share same configuration file & error log file with you. Can you tell me how to share .txt/.conf file with you?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [May 3, 2018, 12:33pm UTC](https://discuss.elastic.co/t/autodetection-is-not-working-in-elk-6-2-3/130224/5 "2018-05-03T12:33:35Z")

</div>

If it's too big to post here you can e.g. use pastebin or gist. Don't forget to include sample input that triggers the problem.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 31, 2018, 12:33pm UTC](https://discuss.elastic.co/t/autodetection-is-not-working-in-elk-6-2-3/130224/6 "2018-05-31T12:33:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.