# FileBeat Sending to logstash Need help parsing a CSV
**URL:** https://discuss.elastic.co/t/filebeat-sending-to-logstash-need-help-parsing-a-csv/182530
**Category:** Beats
**Tags:** filebeat
**Created:** [May 23, 2019, 11:26pm UTC](https://discuss.elastic.co/t/filebeat-sending-to-logstash-need-help-parsing-a-csv/182530 "2019-05-23T23:26:44Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@iukea](https://discuss.elastic.co/u/iukea)
#### Post date: [May 23, 2019, 11:26pm UTC](https://discuss.elastic.co/t/filebeat-sending-to-logstash-need-help-parsing-a-csv/182530/1 "2019-05-23T23:26:44Z")
Hey, guys, I am having an issue with my Filebeat yml config and was curious if any of you could spot anything obvious that I missing?
Logstash conf
```auto
# Heralding
if [type] == "Heralding" {
csv {
columns => ["timestamp","auth_id","session_id","src_ip","src_port","dest_ip","dest_port","proto","username","password"] separator => ","
}
date {
match => ["timestamp", "yyyy-MM-dd HH:mm:ss.SSSSSS"]
remove_field => ["timestamp"]
}
}
```
**Filebeats yml**
```auto
# Heralding
-
paths:
- /data/heralding/log/auth.csv"
input_type: log
document_type: Heralding
fields:
fields_under_root: true
output.logstash:
hosts:
- 'my ip and this is the correct port for me:6990'
logging.level: debug
logging.selectors:
- publish
```
---
### Author:  [@pierhugues](https://discuss.elastic.co/u/pierhugues)
#### Post date: [May 24, 2019, 4:53pm UTC](https://discuss.elastic.co/t/filebeat-sending-to-logstash-need-help-parsing-a-csv/182530/2 "2019-05-24T16:53:27Z")
What errors are your getting?
---
### Author:  [@iukea](https://discuss.elastic.co/u/iukea)
#### Post date: [May 27, 2019, 6:27pm UTC](https://discuss.elastic.co/t/filebeat-sending-to-logstash-need-help-parsing-a-csv/182530/3 "2019-05-27T18:27:55Z")
Not getting any errors sadly just nothing is being sent
---
### Author:  [@pierhugues](https://discuss.elastic.co/u/pierhugues)
#### Post date: [May 29, 2019, 1:00am UTC](https://discuss.elastic.co/t/filebeat-sending-to-logstash-need-help-parsing-a-csv/182530/4 "2019-05-29T01:00:32Z")
Can you share the log? on both the Logstash and the Beats side?
---
### Author:  [@iukea](https://discuss.elastic.co/u/iukea)
#### Post date: [May 29, 2019, 7:35pm UTC](https://discuss.elastic.co/t/filebeat-sending-to-logstash-need-help-parsing-a-csv/182530/6 "2019-05-29T19:35:56Z")
```
"version": "5.6.1"
},
"input_type": "log",
"json_error": "Error decoding JSON: invalid character 'i' in literal true (expecting 'r')",
"offset": 111,
"source": "/data/heralding/log/auth.csv",
"type": "Heralding"
```
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 26, 2019, 9:36pm UTC](https://discuss.elastic.co/t/filebeat-sending-to-logstash-need-help-parsing-a-csv/182530/7 "2019-06-26T21:36:00Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.