# Import .log file in elasticsearch and Kibana

**URL:** <https://discuss.elastic.co/t/import-log-file-in-elasticsearch-and-kibana/156181>\
**Category:** Elasticsearch\
**Created:** [November 11, 2018, 4:25am UTC](https://discuss.elastic.co/t/import-log-file-in-elasticsearch-and-kibana/156181 "2018-11-11T04:25:09Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![matthiashaefeli](https://avatars.discourse-cdn.com/v4/letter/m/d26b3c/32.png) [@matthiashaefeli](https://discuss.elastic.co/u/matthiashaefeli)\
**Post date:** [November 11, 2018, 4:25am UTC](https://discuss.elastic.co/t/import-log-file-in-elasticsearch-and-kibana/156181/1 "2018-11-11T04:25:09Z")

</div>

I have this .log file with JSON and it looks like this

```
  {"method":"GET","path":"/public/index","format":"html","controller":"public","action":"index","status":200,"duration":84.59,"view":33.7,"db":47.45,"ip":"127.0.0.1","route":"public#index","request_id":"4d7016832294bafa8f593453eed2adb1","source":"unknown","tags":["request"],"@timestamp":"2018-11-09T22:54:06Z","@version":"1"}
{"method":"GET","path":"/public/index","format":"html","controller":"public","action":"index","status":200,"duration":15.44,"view":13.85,"db":0.91,"ip":null,"route":null,"request_id":null,"source":"unknown","tags":["request"],"@timestamp":"2018-11-09T22:54:28Z","@version":"1"}
{"method":"GET","path":"/public/index","format":"html","controller":"public","action":"index","status":200,"duration":13.86,"view":12.47,"db":0.8,"ip":null,"route":null,"request_id":null,"source":"unknown","tags":["request"],"@timestamp":"2018-11-09T22:54:40Z","@version":"1"}

```

and i try to import this in elasticsearch and Kibana. I tried with this code in command line

```
curl -XPOST "http://localhost:9200/test/test" -H "Content-Type: application/json" -d @logfile.log

```

and i get this error

```
{"error":{"root_cause":[{"type":"mapper_parsing_exception","reason":"failed to parse"}],"type":"mapper_parsing_exception","reason":"failed to parse","caused_by":{"type":"illegal_argument_exception","reason":"Malformed content, found extra data after parsing: START_OBJECT"}},"status":400}

```

and when i look in Kibana I see this

 ![Kibana%20test](https://us1.discourse-cdn.com/elastic/original/3X/4/6/466e29fd72e6281241cdda6dae73fa9cbfc584ea.png)

what i am doing wrong?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 11, 2018, 5:10am UTC](https://discuss.elastic.co/t/import-log-file-in-elasticsearch-and-kibana/156181/2 "2018-11-11T05:10:14Z")

</div>

There are multiple documents in your file and not only one document.  
You need to send only one document or use the bulk API but you'll need to change the file content to conform with bulk format.

---

<div class="post-metadata">

**Author:** ![matthiashaefeli](https://avatars.discourse-cdn.com/v4/letter/m/d26b3c/32.png) [@matthiashaefeli](https://discuss.elastic.co/u/matthiashaefeli)\
**Post date:** [November 11, 2018, 5:13am UTC](https://discuss.elastic.co/t/import-log-file-in-elasticsearch-and-kibana/156181/3 "2018-11-11T05:13:53Z")

</div>

thanks @dadoonet  
how would i use the bulk format and how should look the file?

I am using the logstasher gem (i have a rails app)  
can I change the config that i get the right format ?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 11, 2018, 7:11am UTC](https://discuss.elastic.co/t/import-log-file-in-elasticsearch-and-kibana/156181/4 "2018-11-11T07:11:37Z")

</div>

[https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-bulk.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-bulk.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 9, 2018, 7:11am UTC](https://discuss.elastic.co/t/import-log-file-in-elasticsearch-and-kibana/156181/5 "2018-12-09T07:11:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.