# Csv output plugin prints wrong stuff
**URL:** https://discuss.elastic.co/t/csv-output-plugin-prints-wrong-stuff/65574
**Category:** Logstash
**Created:** [November 10, 2016, 1:00am UTC](https://discuss.elastic.co/t/csv-output-plugin-prints-wrong-stuff/65574 "2016-11-10T01:00:17Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@molejnik](https://discuss.elastic.co/u/molejnik)
#### Post date: [November 10, 2016, 1:00am UTC](https://discuss.elastic.co/t/csv-output-plugin-prints-wrong-stuff/65574/1 "2016-11-10T01:00:18Z")
I want to extract some fields from my log file and write them to a file in csv format. Say I have a simple log file:
SimpleLog.txt:
Test.cpp:1234 error
Test.cpp:1277 success
Other.cpp:12 Error
Last.java:57 Succ
My logstash config file is as follows:
input {
beats {
port =\> "5043"
}
}
filter {
grok {
match =\> { "message" =\> "%{WORD:filename}\.%{WORD:suffix}:%{INT:line\_no} %{WORD:msg}"}
}
}
output {
csv {
fields =\> ["filename", "suffix"]
path =\> "/home/molejnik/elk/test\_output.csv"
csv\_options =\> {
"col\_sep" =\> "\t\t\t"
"row\_sep" =\> "\r\n\n\n\n"
}
}
}
However, I get the following file produced by logstash:
test\_output.csv:
2016-11-10T00:55:11.161Z molejnik-ux Test.cpp:1234 error2016-11-10T00:55:11.161Z molejnik-ux Test.cpp:1277 success2016-11-10T00:55:11.161Z molejnik-ux Other.cpp:12 Error2016-11-10T00:55:11.161Z molejnik-ux Last.java:57 Succ
So the log lines get written in full and without a separator.
Any ideas what I am doing wrong?
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [November 14, 2016, 6:43am UTC](https://discuss.elastic.co/t/csv-output-plugin-prints-wrong-stuff/65574/2 "2016-11-14T06:43:23Z")
Seems like the same problem as in the thread below.
> [@Export from elasticsearch to csv problem. Where I am wrong?](https://discuss.elastic.co/t/export-from-elasticsearch-to-csv-problem-where-i-am-wrong/65558):
>
> Hi have the following logstash config file: input { elasticsearch { hosts =\> ["localhost"] index =\> "myindex" type =\> "mytype" query =\> '{"query" : { "match\_all" : {} }}' } } output { csv { fields =\> [my\_fields\_array] path =\> "export.csv csv\_options =\> {"col\_sep" =\> "\t" "row\_sep" =\> "\r\n"} } } Opening export.csv i don't get any mapped data fields but only a list of something like: 2016-11-02T07:41:15.917Z %{host} %{message}2016-11-02T07:41:16.708Z %{host}... Any idea about …
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 12, 2016, 6:43am UTC](https://discuss.elastic.co/t/csv-output-plugin-prints-wrong-stuff/65574/3 "2016-12-12T06:43:30Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.