# Elastic 8.10.4 **URL:** \ **Category:** Logstash\ **Created:** [December 3, 2025, 10:44pm UTC](https://discuss.elastic.co/t/elastic-8-10-4/383848 "2025-12-03T22:44:27Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![jgomezf](https://avatars.discourse-cdn.com/v4/letter/j/b77776/32.png) [@jgomezf](https://discuss.elastic.co/u/jgomezf)\ **Post date:** [December 3, 2025, 10:44pm UTC](https://discuss.elastic.co/t/elastic-8-10-4/383848/1 "2025-12-03T22:44:27Z")
Hello. We are working with elastic 8.4.x and the ecs-logstash was working correctly. We have updated the version 8.10..4 and the ecs-logstash and pattern is not found. It's possibility that the version is not available. The file ecs-logstash is not in /etc/logstash/conf.d and the file logstash.conf is the same. The file configuration is logstash.yml The version java is 8.10.4. Thanks ---
**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\ **Post date:** [December 6, 2025, 1:46pm UTC](https://discuss.elastic.co/t/elastic-8-10-4/383848/2 "2025-12-06T13:46:25Z")
Hello @jgomezf Welcome to the community!! The issue is not clear, can you share more information which can be helpful. Your previous elk version was 8.4.x & everything was working as expected. You did upgrade to 8.10.4 for your ELK stack & post this you are having issues? Thanks!! ---
**Author:** ![jgomezf](https://avatars.discourse-cdn.com/v4/letter/j/b77776/32.png) [@jgomezf](https://discuss.elastic.co/u/jgomezf)\ **Post date:** [December 8, 2025, 7:17pm UTC](https://discuss.elastic.co/t/elastic-8-10-4/383848/3 "2025-12-08T19:17:12Z")
Hi. Sorry for this not clear. We have updated 8.4.x to 8.10.x and the problem is that the ecs-logstash is missing in Index Pattern. When I worked with 8.4.x the ecs-logstash is working correctly. Thanks ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [December 8, 2025, 7:41pm UTC](https://discuss.elastic.co/t/elastic-8-10-4/383848/4 "2025-12-08T19:41:41Z")
Hello and welcome, Can you provide more context about what it is not working? There is no such thing as an `ecs-logstash` file inside `/etc/logstash/conf.d` by default. Do you havey any logstash logs with error that you can share? it is not clear what is your issue here. ---
**Author:** ![jgomezf](https://avatars.discourse-cdn.com/v4/letter/j/b77776/32.png) [@jgomezf](https://discuss.elastic.co/u/jgomezf)\ **Post date:** [December 9, 2025, 4:37pm UTC](https://discuss.elastic.co/t/elastic-8-10-4/383848/5 "2025-12-09T16:37:24Z")
Hello. The logs do not show any errors that indicate the problem. The problem we are experiencing is as follows: We have updated to version 8.10.x and have detected that ecs-logstash\* does not appear in Index-Pattern. It worked with the previous version (8.4.x). ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [December 9, 2025, 4:48pm UTC](https://discuss.elastic.co/t/elastic-8-10-4/383848/6 "2025-12-09T16:48:39Z")
> [@jgomezf](#): > > We have updated to version 8.10.x and have detected that ecs-logstash\* does not appear in Index-Pattern. It worked with the previous version (8.4.x). As mentioned, it is not clear what you mean with this, you need to provide some context, a log, some error, some screenshot. What you mean with `ecs-logstash`? Is it an index? ---
**Author:** ![jgomezf](https://avatars.discourse-cdn.com/v4/letter/j/b77776/32.png) [@jgomezf](https://discuss.elastic.co/u/jgomezf)\ **Post date:** [December 9, 2025, 5:01pm UTC](https://discuss.elastic.co/t/elastic-8-10-4/383848/7 "2025-12-09T17:01:44Z")
Hi Leandro.Sorry for this not clear. ecs-logstash is a Index Pattern ---
**Author:** ![RainTown](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raintown/32/140206_2.png) [@RainTown](https://discuss.elastic.co/u/RainTown)\ **Post date:** [December 9, 2025, 5:32pm UTC](https://discuss.elastic.co/t/elastic-8-10-4/383848/8 "2025-12-09T17:32:57Z")
This is a little painful thread. It's going to be really challenging to help you if you are not more open and clear. Do you have kibana? What does a GET (dev tools) on `_cat/indices?index=*,.*&h=index,health,dc,ss,cd&s=cd&bytes=b` return? > [@jgomezf](#): > > We have updated the version 8.10..4 what does this actually mean? Please write a couple of sentences on HOW you did that upgrade, what you upgraded, tell us a little bit about your environment, how big is your cluster, etc. > [@jgomezf](#): > > Sorry for this not clear. ecs-logstash is a Index Pattern OK, and what indices do you think the index pattern previously matched ?