# Grok processor is not applied for indexed records in elastic search

**URL:** https://discuss.elastic.co/t/grok-processor-is-not-applied-for-indexed-records-in-elastic-search/105760
**Category:** Elasticsearch
**Created:** [October 30, 2017, 12:29pm UTC](https://discuss.elastic.co/t/grok-processor-is-not-applied-for-indexed-records-in-elastic-search/105760 "2017-10-30T12:29:11Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![vivekthangathurai](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vivekthangathurai/32/23561_2.png) [@vivekthangathurai](https://discuss.elastic.co/u/vivekthangathurai)
#### Post date: [October 30, 2017, 12:29pm UTC](https://discuss.elastic.co/t/grok-processor-is-not-applied-for-indexed-records-in-elastic-search/105760/1 "2017-10-30T12:29:11Z")

</div>

I am using the filebeat for indexing the records in elastic search. and I wanted to modify the index field so I added a pattern using ingest pipeline and gork.  
The records are getting indexed but the processing of pipeline is not happening. What could be the reason?

I have verified the processing pipeline is added.

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [October 30, 2017, 6:20pm UTC](https://discuss.elastic.co/t/grok-processor-is-not-applied-for-indexed-records-in-elastic-search/105760/2 "2017-10-30T18:20:38Z")

</div>

What does the pipeline look like? What does your filebeat config look like?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 27, 2017, 6:20pm UTC](https://discuss.elastic.co/t/grok-processor-is-not-applied-for-indexed-records-in-elastic-search/105760/3 "2017-11-27T18:20:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
