# Filebeat/Logstash Log\_Type issue

**URL:** <https://discuss.elastic.co/t/filebeat-logstash-log-type-issue/246529>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [August 27, 2020, 1:55am UTC](https://discuss.elastic.co/t/filebeat-logstash-log-type-issue/246529 "2020-08-27T01:55:35Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![userR](https://avatars.discourse-cdn.com/v4/letter/u/22d042/32.png) [@userR](https://discuss.elastic.co/u/userR)\
**Post date:** [August 27, 2020, 1:55am UTC](https://discuss.elastic.co/t/filebeat-logstash-log-type-issue/246529/1 "2020-08-27T01:55:35Z")

</div>

Hi, my current Filebeat configuration is below:

> ```
> - type: log
> enabled: true
> paths:
> - /DATAPATH/log*
> fields: {log_type: JLogs}
> multiline.pattern: *pattern*
> multiline.negate: true
> multiline.match: after
> 
> ```

My logstash filter is below. If I take out the if statement, my configuration works perfectly fine. However if I add the if statement (Only adding it because I am in the process of adding different paths in filebeat with different log\_types), the log does not go through the filter:

> filter {  
> if [fields][log\_type] == "JLogs" {  
> //config  
> }

Also, one more follow up. How would I parse date like this: Aug 24 03:32:21 in filebeat?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 24, 2020, 3:55am UTC](https://discuss.elastic.co/t/filebeat-logstash-log-type-issue/246529/2 "2020-09-24T03:55:57Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.