# Discrete grokparse failures **URL:** \ **Category:** Logstash\ **Created:** [July 23, 2018, 10:39am UTC](https://discuss.elastic.co/t/discrete-grokparse-failures/141144 "2018-07-23T10:39:30Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![Nithani25](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nithani25/32/33457_2.png) [@Nithani25](https://discuss.elastic.co/u/Nithani25)\ **Post date:** [July 23, 2018, 10:39am UTC](https://discuss.elastic.co/t/discrete-grokparse-failures/141144/1 "2018-07-23T10:39:30Z")
HI Team, I working parsing the below set of documents. 2018-06-11 04:28:20,580 [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] DEBUG c.f.a.d.r.impl.ClientRepositoryImpl - This client:[taxId=985758412, nickName=null] already exists on your key client list. 2018-06-11 04:28:20,598 [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] ERROR c.f.a.s.c.BusinessExceptionMapper - This client already exists on your key client list. com.frk.advisors.domain.exceptions.KeyClientExistException: This client already exists on your key client list. at com.frk.advisors.domain.repository.impl.ClientRepositoryImpl.addKeyClient(ClientRepositoryImpl.java:141) at com.frk.advisors.application.impl.ManageKeyClientServiceImpl.addKeyClient(ManageKeyClientServiceImpl.java:58) at com.frk.advisors.service.KeyClientsResource.addKeyClient(KeyClientsResource.java:89) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.glassfish.jersey.server.model.internal.ResourceMethodInvocationHandlerFactory$1.invoke(ResourceMethodInvocationHandlerFactory.java:81) at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher$1.run(AbstractJavaResourceMethodDispatcher.java:151) at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.invoke(AbstractJavaResourceMethodDispatcher.java:171) at org.glassfish.jersey.server.model.internal.JavaResourceMethodDispatcherProvider$TypeOutInvoker.doDispatch(JavaResourceMethodDispatcherProvider.java:195) at org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher.dispatch(AbstractJavaResourceMethodDispatcher.java:104) at org.glassfish.jersey.server.model.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:402) at org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:349) at org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(ResourceMethodInvoker.java:106) at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:259) at org.glassfish.jersey.internal.Errors$1.call(Errors.java:271) at org.glassfish.jersey.internal.Errors$1.call(Errors.java:267) at org.glassfish.jersey.internal.Errors.process(Errors.java:315) at org.glassfish.jersey.internal.Errors.process(Errors.java:297) at org.glassfish.jersey.internal.Errors.process(Errors.java:267) at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:318) at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:236) at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:1010) at org.glassfish.jersey.servlet.WebComponent.service(WebComponent.java:373) at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:382) at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:345) at org.glassfish.jersey.servlet.ServletContainer.service(ServletContainer.java:220) at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:280) at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:254) at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:136) at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:346) at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:243) at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3447) at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3417) at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321) at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120) at weblogic.servlet.provider.WlsSubjectHandle.run(WlsSubjectHandle.java:57) at weblogic.servlet.internal.WebAppServletContext.doSecuredExecute(WebAppServletContext.java:2280) at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2196) at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174) at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1632) at weblogic.servlet.provider.ContainerSupportProviderImpl$WlsRequestExecutor.run(ContainerSupportProviderImpl.java:256) at weblogic.work.ExecuteThread.execute(ExecuteThread.java:311) at weblogic.work.ExecuteThread.run(ExecuteThread.java:263) 2018-06-11 04:28:23,549 [[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'] TRACE c.f.c.validators.Requestvalidator - getValidationErrors : Start 2018-06-11 04:28:23,552 [[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'] INFO c.f.c.validators.Requestvalidator - validation errors : [] 2018-06-11 04:28:23,553 [[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'] DEBUG c.f.a.d.r.impl.ClientRepositoryImpl - This client:[taxId=985758412, nickName=null] already exists on your key client list. ## The multiline properties are set as below in filebeat.yml; - type: log paths: - /opt/bea/Logwarhouse/logs\*.\* close\_inactive: 20m multiline.pattern: '^\d' multiline.negate: true multiline.match: after ## Logstash conf file as below: input { beats { port =\> "5049" } } filter { grok { match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:timestamp}\s[%{DATA:ThreadDetails}]\s%{WORD:Loglevel}\s%{JAVACLASS:CLAZZ}\s-\s%{GREEDYDATA:Logmessage}" } } } Even after the above settings, i could observe some grokparse failure message in logstash logs and i am also not able to see any info messages in my kibana index(could see them pushed through filebeat). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 20, 2018, 10:39am UTC](https://discuss.elastic.co/t/discrete-grokparse-failures/141144/2 "2018-08-20T10:39:38Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.