# Elasticseach filter on logstash not working?

**URL:** <https://discuss.elastic.co/t/elasticseach-filter-on-logstash-not-working/250849>\
**Category:** Elasticsearch\
**Created:** [October 2, 2020, 10:38pm UTC](https://discuss.elastic.co/t/elasticseach-filter-on-logstash-not-working/250849 "2020-10-02T22:38:24Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![sdonkey](https://avatars.discourse-cdn.com/v4/letter/s/97f17d/32.png) [@sdonkey](https://discuss.elastic.co/u/sdonkey)\
**Post date:** [October 2, 2020, 10:38pm UTC](https://discuss.elastic.co/t/elasticseach-filter-on-logstash-not-working/250849/1 "2020-10-02T22:38:24Z")

</div>

Hi,

I'm trying to use the elastic search filter on logstash for make some Data Enrichment.

I got two indexes, and my goal it's get some data from one of them and add it to the other.

I configured a logstash filter who search in my elasticsearch and if there is a match the output goes to the index.

But my filter it's not working propery because when I test the filter i got this error

[WARN] 2020-10-02 19:23:09.536 [[main]\>worker2] elasticsearch - Failed to query elasticsearch for previous event {:index=\>"logstash-\*", :error=\>"Unexpected character ('%' (code 37)): expected a valid value (number, String, array, object, 'true', 'false' or 'null')\n

here it's my settings and files

> **[Untitled - Pastebin](https://pastebin.pl/view/cb124f3f)**

Thanks!  
Greetings!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 30, 2020, 10:38pm UTC](https://discuss.elastic.co/t/elasticseach-filter-on-logstash-not-working/250849/2 "2020-10-30T22:38:29Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.