# Failing to parse and aggregate the Existing Index

**URL:** <https://discuss.elastic.co/t/failing-to-parse-and-aggregate-the-existing-index/60920>\
**Category:** Logstash\
**Created:** [September 19, 2016, 5:05pm UTC](https://discuss.elastic.co/t/failing-to-parse-and-aggregate-the-existing-index/60920 "2016-09-19T17:05:06Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![pramod\_kumar](https://avatars.discourse-cdn.com/v4/letter/p/97f17d/32.png) [@pramod\_kumar](https://discuss.elastic.co/u/pramod_kumar)\
**Post date:** [September 19, 2016, 5:05pm UTC](https://discuss.elastic.co/t/failing-to-parse-and-aggregate-the-existing-index/60920/1 "2016-09-19T17:05:06Z")

</div>

Hi ,

I am trying to parse the existing index with the logstash config file, But am Failing to parse and aggregate the Existing Index.

I have attached the config file. please correct me if am doing something wrong.

input {  
elasticsearch {  
hosts =\> "localhost"  
index =\> "logsummary"  
query =\> '{ "size":0,"aggs":{ "date\_filter":{ "filter":{ "range":{ "timestamp":{ "gte":"now-90d/d","lt":"now/d"}}},"aggregations":{ "tenantName\_set":{ "terms":{ "field":"tenantName"},"aggregations":{ "version\_set":{ "terms":{ "field":"version"},"aggregations":{ "tier\_set":{ "terms":{ "field":"tier"},"aggregations":{ "env\_type\_set":{ "terms":{ "field":"env\_type"},"aggregations":{ "Error\_Name\_set":{ "terms":{ "field":"Error\_Name"}, "aggregations":{ "result\_set":{ "terms":{ "field":"Error\_Description"}}}}}}}}}}}}}}}}'  
}  
}

output {  
stdout{  
codec =\> dots  
}  
elasticsearch{  
hosts=\>["localhost:9200"]  
index =\> "sample-poc-aggregation"  
}  
}

Please let me know, if you need any additional information.

Thanks,  
Pramod

---

<div class="post-metadata">

**Author:** ![pramod\_kumar](https://avatars.discourse-cdn.com/v4/letter/p/97f17d/32.png) [@pramod\_kumar](https://discuss.elastic.co/u/pramod_kumar)\
**Post date:** [September 20, 2016, 6:07pm UTC](https://discuss.elastic.co/t/failing-to-parse-and-aggregate-the-existing-index/60920/2 "2016-09-20T18:07:00Z")

</div>

Hi All,

Please can anyone take initiative and help me with the above issue ??

Thanks  
Pramod

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:37am UTC](https://discuss.elastic.co/t/failing-to-parse-and-aggregate-the-existing-index/60920/3 "2017-07-06T04:37:41Z")

</div>

Closed on July 6, 2017, 4:37am UTC