# Index pattern issues

**URL:** <https://discuss.elastic.co/t/index-pattern-issues/122039>\
**Category:** Logstash\
**Created:** [March 1, 2018, 11:10am UTC](https://discuss.elastic.co/t/index-pattern-issues/122039 "2018-03-01T11:10:16Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bakkali\_Amine](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bakkali_amine/32/91129_2.png) [@Bakkali\_Amine](https://discuss.elastic.co/u/Bakkali_Amine)\
**Post date:** [March 1, 2018, 11:10am UTC](https://discuss.elastic.co/t/index-pattern-issues/122039/1 "2018-03-01T11:10:16Z")

</div>

when adding codec = jason\_lines can't add an index in elasticsearc

---

<div class="post-metadata">

**Author:** ![Eswar\_Kumar\_Musiboin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/eswar_kumar_musiboin/32/28623_2.png) [@Eswar\_Kumar\_Musiboin](https://discuss.elastic.co/u/Eswar_Kumar_Musiboin)\
**Post date:** [March 1, 2018, 11:17am UTC](https://discuss.elastic.co/t/index-pattern-issues/122039/2 "2018-03-01T11:17:44Z")

</div>

there is no Jason\_lines codec plugin in logstash. U mean json\_lines plugin?

---

<div class="post-metadata">

**Author:** ![Bakkali\_Amine](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bakkali_amine/32/91129_2.png) [@Bakkali\_Amine](https://discuss.elastic.co/u/Bakkali_Amine)\
**Post date:** [March 1, 2018, 11:29am UTC](https://discuss.elastic.co/t/index-pattern-issues/122039/3 "2018-03-01T11:29:02Z")

</div>

yes  
this is my config :  
input {  
file {  
path =\> "/var/ossec/logs/alerts/alerts.log"  
tags =\> ["ossec"]  
codec =\> json\_lines  
}  
}  
output {  
if "ossec" in [tags] {  
elasticsearch {  
hosts =\> ["localhost:9200"]  
index =\> "ossec-%{+YYYY.MM.dd}"  
}  
}  
}

---

<div class="post-metadata">

**Author:** ![Eswar\_Kumar\_Musiboin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/eswar_kumar_musiboin/32/28623_2.png) [@Eswar\_Kumar\_Musiboin](https://discuss.elastic.co/u/Eswar_Kumar_Musiboin)\
**Post date:** [March 1, 2018, 11:31am UTC](https://discuss.elastic.co/t/index-pattern-issues/122039/4 "2018-03-01T11:31:19Z")

</div>

for file input use codec =\> json instead codec =\> json\_lines.

Check this link: [https://www.elastic.co/guide/en/logstash/6.0/plugins-codecs-json\_lines.html#\_description\_150](https://www.elastic.co/guide/en/logstash/6.0/plugins-codecs-json_lines.html#_description_150)

to process file input, its suggestible to use json codec. Ping error if any further.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 29, 2018, 11:31am UTC](https://discuss.elastic.co/t/index-pattern-issues/122039/5 "2018-03-29T11:31:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.