# Dissect errors post upgrade

**URL:** <https://discuss.elastic.co/t/dissect-errors-post-upgrade/163081>\
**Category:** Logstash\
**Created:** [January 6, 2019, 3:28pm UTC](https://discuss.elastic.co/t/dissect-errors-post-upgrade/163081 "2019-01-06T15:28:59Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![NerdSec](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nerdsec/32/22056_2.png) [@NerdSec](https://discuss.elastic.co/u/NerdSec)\
**Post date:** [January 6, 2019, 3:28pm UTC](https://discuss.elastic.co/t/dissect-errors-post-upgrade/163081/1 "2019-01-06T15:28:59Z")

</div>

Hi,

Post upgrade to 6.5.4 from 6.3.2, we are seeing a lot of warnings in the dissect filter.

We are handling these using multiple dissects in conditionals, but the warning messages are often distracting in the log file and I am afraid we are missing out errors or other warnings. Any suggestions on handling these errors or warnings?

```auto
[2019-01-06T20:06:27,990][WARN][org.logstash.dissect.Dissector] Dissector mapping, pattern not found {"field"=>"message", "pattern"=>"%{date} %{time} %{} %{[device][hostname]} %{[device][ip]} %{[web][method]} %{[web][uristem]} %{[web][uri]} %{[src][port]} %{[src][user]} %{[src][ip]} %{[web][version]} %{[web][useragent]} %{[web][cookie]} %{[web][referer]} %{[src][hostname]} %{[web][response_code]} %{} %{[web][win32status]} %{[web][bytes_sent]} %{[web][bytes_received]} %{[web][ttl]}", "event"=>{"@version"=>"1", "tags"=>["webserver", "unparsed", "_dissectfailure"], "@timestamp"=>2019-01-06T14:36:19.904Z, "offset"=>1195988, "beat"=>{"name"=>"FileBeat - 72", "version"=>"6.3.2", "hostname"=>"SIDCBEATS02"}, "prospector"=>{"type"=>"log"}, "input"=>{"type"=>"log"}, "source"=>"data.201901031234500000.1546519203.702473.log", "message"=>"2018-10-31 01:10:43 w3svc1 awds02 10.129.78.79 post /deviceservices/securechannel.aws/v2 - 443 - 10.111.7.20 http/1.1 agent/8.3.0.71/android/5.1.1 - awds.well.com 200 0 0 234 3064 218"}}

```

Cheers!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 3, 2019, 3:29pm UTC](https://discuss.elastic.co/t/dissect-errors-post-upgrade/163081/2 "2019-02-03T15:29:09Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.