# Elapsed filter - keeps crashing

**URL:** <https://discuss.elastic.co/t/elapsed-filter-keeps-crashing/243215>\
**Category:** Logstash\
**Created:** [July 30, 2020, 12:19pm UTC](https://discuss.elastic.co/t/elapsed-filter-keeps-crashing/243215 "2020-07-30T12:19:52Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tommie](https://avatars.discourse-cdn.com/v4/letter/t/f0a364/32.png) [@Tommie](https://discuss.elastic.co/u/Tommie)\
**Post date:** [July 30, 2020, 12:19pm UTC](https://discuss.elastic.co/t/elapsed-filter-keeps-crashing/243215/1 "2020-07-30T12:19:52Z")

</div>

Can anyone please help me with the following:  
This logstash config is working fine (only with the elapsed part commented):

```auto
filter {

    csv { 
        separator => "|"
        columns => ["datum","level","uniek","message","teller"]
    }
date {
        match => ["datum", "yyyy-MM-dd HH:mm:ss.SSSS"]
	}

	if "Proces is gestart" in [message] { 
		mutate { 
			add_tag => ["taskStarted"] 
		}
	}
	if "Proces is geeindigd" in [message] {
		mutate { 
			add_tag => ["taskTerminated"] 
		}
	}
#	elapsed {
# unique_id_field => "uniek"
# start_tag => "taskStarted"
# end_tag => "taskTerminated"
# timeout => 10
#	}
}

```

When I uncomment the elapsed part (the most important part!) it crashes.

Error message is below

An unexpected error occurred! {:error=\>#\<LogStash::Error: Don't know how to handle `Java::JavaLang::IllegalStateException` for `PipelineAction::Create<main>`\>, :backtrace=\>["org/logstash/execution/ConvergeResultExt.java:129:in `create'", "org/logstash/execution/ConvergeResultExt.java:57:in `add'", "C:/\_ELK/logstash/logstash-core/lib/logstash/agent.rb:355:in `block in converge\_state'"]}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 27, 2020, 12:19pm UTC](https://discuss.elastic.co/t/elapsed-filter-keeps-crashing/243215/2 "2020-08-27T12:19:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.