# Grouping of similar errors

**URL:** https://discuss.elastic.co/t/grouping-of-similar-errors/240399
**Category:** Logstash
**Created:** [July 8, 2020, 4:13pm UTC](https://discuss.elastic.co/t/grouping-of-similar-errors/240399 "2020-07-08T16:13:48Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Shloka](https://avatars.discourse-cdn.com/v4/letter/s/96bed5/32.png) [@Shloka](https://discuss.elastic.co/u/Shloka)
#### Post date: [July 8, 2020, 4:13pm UTC](https://discuss.elastic.co/t/grouping-of-similar-errors/240399/1 "2020-07-08T16:13:49Z")

</div>

Hi  
I'm looking for help with logstash configuration  
We have filebeat on the target servers which reads the log lines and sends to logstash installed on another central server. The logstash further filters the lines based on the configured error keywords and sends email  
Requirement:  
If similar or same type of errors are printed continuously for a particular time period only 1 notification should be sent for those set of errors. Please let me know If there is any such configuration available in logstash to set threshold either on number of lines or time frame. Any help in this regards really appreciated

Logstash version currently installed is 6.5.3

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 5, 2020, 4:13pm UTC](https://discuss.elastic.co/t/grouping-of-similar-errors/240399/2 "2020-08-05T16:13:51Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
