# Elapsed filter, problem with configuration?

**URL:** <https://discuss.elastic.co/t/elapsed-filter-problem-with-configuration/141155>\
**Category:** Logstash\
**Created:** [July 23, 2018, 11:22am UTC](https://discuss.elastic.co/t/elapsed-filter-problem-with-configuration/141155 "2018-07-23T11:22:26Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![bigster](https://avatars.discourse-cdn.com/v4/letter/b/8e7dd6/32.png) [@bigster](https://discuss.elastic.co/u/bigster)\
**Post date:** [July 23, 2018, 11:22am UTC](https://discuss.elastic.co/t/elapsed-filter-problem-with-configuration/141155/1 "2018-07-23T11:22:26Z")

</div>

I'm trying to create an elapsed filter but the elapsed fields don't appear. This is the input:

```
statement => "SELECT TRANSACTION_ID, COMMUNICATION_ID, 
    BROKER_NAME, IS_NAME, SERVICE_NAME, OPERATION_NAME, OPERATION_VERSION, MESSAGE_TYPE, APPROACH, CLIENT_ID, 
    APPLICATION_ID, EXT_SESSION_ID, EXT_TRANSACTION_ID, EXT_ORIGIN, LANG_CODE, EXT_HOST, APPLICATION, CHANNEL, 
    NUM_RETRIES, STATUS_CODE, STATUS_MSG, DATE_CREATED, 
    DESTINATION_HOST, OPERATION_ID 
    FROM IIB_OPER.COMMUNICATION_LOG 
    WHERE DATE_CREATED > '2018-07-20'"

```

And this is the filter:

```
filter {
    if [message_type] == "Req" {
        mutate {
            add_tag => ["taskStarted"]
        }
    }
    if [message_type] == "Res" {
        mutate {
            add_tag => ["taskTerminated"]
        }
    }   
    elapsed {
        unique_id_field => "operation_id"
        start_tag => "taskStarted"
        end_tag => "taskTerminated"
        timeout => 20000
        new_event_on_match => true
    }
}

```

In Kibana, in the index patterns, the fields appear but when i get the logstash to work the elapsed fields don't appear.

Any idea why?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 20, 2018, 11:33am UTC](https://discuss.elastic.co/t/elapsed-filter-problem-with-configuration/141155/2 "2018-08-20T11:33:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.