# I'm receiving just one log

**URL:** <https://discuss.elastic.co/t/im-receiving-just-one-log/138674>\
**Category:** Kibana\
**Created:** [July 5, 2018, 9:32am UTC](https://discuss.elastic.co/t/im-receiving-just-one-log/138674 "2018-07-05T09:32:25Z")\
**Posts on this page:** 9\
**Page:** 2

<div class="post-metadata">

**Author:** ![asalma](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/asalma/32/32199_2.png) [@asalma](https://discuss.elastic.co/u/asalma)\
**Post date:** [July 6, 2018, 1:27pm UTC](https://discuss.elastic.co/t/im-receiving-just-one-log/138674/21 "2018-07-06T13:27:43Z")

</div>

@Christian_Dahlqvist

I don't understand, I put the same conf in an other file, I start receiving all logs but duplicated even with the : fingerprint !!

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/3/930fb5f0e41b72bf130bb56ffc266c4c17db49aa.png)

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [July 6, 2018, 1:28pm UTC](https://discuss.elastic.co/t/im-receiving-just-one-log/138674/22 "2018-07-06T13:28:53Z")

</div>

Can you please show a full event?

---

<div class="post-metadata">

**Author:** ![asalma](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/asalma/32/32199_2.png) [@asalma](https://discuss.elastic.co/u/asalma)\
**Post date:** [July 6, 2018, 1:31pm UTC](https://discuss.elastic.co/t/im-receiving-just-one-log/138674/23 "2018-07-06T13:31:44Z")

</div>

what do you mean by full event ?

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [July 6, 2018, 1:34pm UTC](https://discuss.elastic.co/t/im-receiving-just-one-log/138674/24 "2018-07-06T13:34:07Z")

</div>

Expand one of the events that is a duplicate in the Discover screen and show this to us. This should show the fields as well as what the ID looks like. It would actually be useful to see a full set of duplicate events.

---

<div class="post-metadata">

**Author:** ![asalma](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/asalma/32/32199_2.png) [@asalma](https://discuss.elastic.co/u/asalma)\
**Post date:** [July 6, 2018, 1:34pm UTC](https://discuss.elastic.co/t/im-receiving-just-one-log/138674/25 "2018-07-06T13:34:46Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/3/3/33e2abebd27e8560263f0fc7ac254a6b00e4ef76.png)

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [July 6, 2018, 1:35pm UTC](https://discuss.elastic.co/t/im-receiving-just-one-log/138674/26 "2018-07-06T13:35:53Z")

</div>

Excellent. can you do the same for the other duplicate event?

---

<div class="post-metadata">

**Author:** ![asalma](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/asalma/32/32199_2.png) [@asalma](https://discuss.elastic.co/u/asalma)\
**Post date:** [July 6, 2018, 1:56pm UTC](https://discuss.elastic.co/t/im-receiving-just-one-log/138674/27 "2018-07-06T13:56:42Z")

</div>

I m really sorry they are not duplicated now !! thank you a lot !!

---

<div class="post-metadata">

**Author:** ![mithesh\_reddy\_bolla1](https://avatars.discourse-cdn.com/v4/letter/m/5fc32e/32.png) [@mithesh\_reddy\_bolla1](https://discuss.elastic.co/u/mithesh_reddy_bolla1)\
**Post date:** [July 10, 2018, 12:13pm UTC](https://discuss.elastic.co/t/im-receiving-just-one-log/138674/28 "2018-07-10T12:13:00Z")

</div>

good

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 7, 2018, 12:19pm UTC](https://discuss.elastic.co/t/im-receiving-just-one-log/138674/29 "2018-08-07T12:19:01Z")

</div>

Closed on August 7, 2018, 12:19pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

[Previous page](https://discuss.elastic.co/t/im-receiving-just-one-log/138674.md?page=1)
