# Issues with converting parsed Logstash logs to Kibana - 6.8.2
**URL:** https://discuss.elastic.co/t/issues-with-converting-parsed-logstash-logs-to-kibana-6-8-2/209708
**Category:** Kibana
**Created:** [November 27, 2019, 2:50pm UTC](https://discuss.elastic.co/t/issues-with-converting-parsed-logstash-logs-to-kibana-6-8-2/209708 "2019-11-27T14:50:54Z")
**Posts on this page:** 9
**Page:** 1
### Author:  [@JPetrucka](https://discuss.elastic.co/u/JPetrucka)
#### Post date: [November 27, 2019, 2:50pm UTC](https://discuss.elastic.co/t/issues-with-converting-parsed-logstash-logs-to-kibana-6-8-2/209708/1 "2019-11-27T14:50:55Z")
Hey everyone,
We are having issues taking the parsed logs from Logstash and ingesting them into Kibana to produce tags and graphs. The error states "No cached mapping for this field. Refresh list from Management \> Index Patterns page". When we click the refresh button, nothing happens. Could someone be able to point us in the right direction?
Thanks a ton!
---
### Author:  [@matw](https://discuss.elastic.co/u/matw)
#### Post date: [November 28, 2019, 8:32am UTC](https://discuss.elastic.co/t/issues-with-converting-parsed-logstash-logs-to-kibana-6-8-2/209708/2 "2019-11-28T08:32:42Z")
Hi
Could you provide the JSON view of this record? and could ja export and provide the index pattern object can be done in **Management/Saved Objects**
Here you can filter by the name of the index pattern, select and export it
thanks!
Best,
Matthias
---
### Author:  [@JPetrucka](https://discuss.elastic.co/u/JPetrucka)
#### Post date: [November 28, 2019, 1:25pm UTC](https://discuss.elastic.co/t/issues-with-converting-parsed-logstash-logs-to-kibana-6-8-2/209708/3 "2019-11-28T13:25:46Z")
Hi Matthias,
Thanks for your reply. Here is the following JSON view followed by the index pattern object. We are using _:logstash-_ for our indexing but, even if we add new fields, they do not show up (ie src\_port)
The index pattern is too large to attach here. Let me know if there is a way to send it to you. Or, if you prefer, I can send some screenshots of it.
{
"\_index": "so-dev:logstash-firewall-2019.11.28",
"\_type": "doc",
"\_id": "9w8msm4B4A1jhnxIuXwy",
"\_version": 1,
"\_score": null,
"\_source": {
"dst\_port": "xxxxx",
"dst\_ip": "x.x.x.x",
"event\_type": "firewall",
"action": "denied",
"hit\_count": "1",
"message": "%ASA-6-106100: access-list 100 denied tcp outside/xxxx(xxx) -\> inside/xxxxx(xxxxx) hit-cnt 1 300-second interval [0x40c998bc, 0x00000000]",
"interval": "300-second interval",
"tags": [
"syslogng",
"firewall",
"conf\_file\_1005"
],
"hashcode1": "0x40c998bc",
"@version": "1",
"syslog\_facility": "user-level",
"syslog-legacy\_msghdr": ": ",
"host": "gateway",
"logstash\_time": 0.0016069412231445312,
"policy\_id": "100",
"port": 45936,
"syslog-host\_from": "xxxxx",
"syslog-facility": "local2",
"hashcode2": "0x00000000",
"protocol": "tcp",
"syslog\_severity": "notice",
"src\_interface": "outside",
"@timestamp": "2019-11-28T13:15:12.415Z",
"syslog-host": "xxxxx",
"syslog-priority": "info",
"src\_port": "443",
"syslog-sourceip": "xxxxxx",
"syslog-tags": ".source.s\_network",
"src\_ip": "xxxxx",
"syslog\_severity\_code": 5,
"syslog\_facility\_code": 1,
"dst\_interface": "inside"
},
"fields": {
"@timestamp": [
"2019-11-28T13:15:12.415Z"
]
},
"highlight": {
"event\_type": [
"@kibana-highlighted-field@firewall@/kibana-highlighted-field@"
]
},
"sort": [
1574946912415
]
}
Thanks a ton!
---
### Author:  [@matw](https://discuss.elastic.co/u/matw)
#### Post date: [November 28, 2019, 1:28pm UTC](https://discuss.elastic.co/t/issues-with-converting-parsed-logstash-logs-to-kibana-6-8-2/209708/4 "2019-11-28T13:28:14Z")
thx, quick question, you're using cross cluster search, right?
---
### Author:  [@JPetrucka](https://discuss.elastic.co/u/JPetrucka)
#### Post date: [November 28, 2019, 1:29pm UTC](https://discuss.elastic.co/t/issues-with-converting-parsed-logstash-logs-to-kibana-6-8-2/209708/5 "2019-11-28T13:29:29Z")
Yes, we are.
---
### Author:  [@matw](https://discuss.elastic.co/u/matw)
#### Post date: [November 28, 2019, 1:30pm UTC](https://discuss.elastic.co/t/issues-with-converting-parsed-logstash-logs-to-kibana-6-8-2/209708/6 "2019-11-28T13:30:39Z")
I've heard a similar issue before, I'll do some research, I think there might be an issue with the index pattern refresh.
---
### Author:  [@JPetrucka](https://discuss.elastic.co/u/JPetrucka)
#### Post date: [November 28, 2019, 1:31pm UTC](https://discuss.elastic.co/t/issues-with-converting-parsed-logstash-logs-to-kibana-6-8-2/209708/7 "2019-11-28T13:31:14Z")
Excellent - I will wait on your reply.
Thank you so much!!
---
### Author:  [@JPetrucka](https://discuss.elastic.co/u/JPetrucka)
#### Post date: [November 28, 2019, 3:04pm UTC](https://discuss.elastic.co/t/issues-with-converting-parsed-logstash-logs-to-kibana-6-8-2/209708/8 "2019-11-28T15:04:11Z")
Sorry - I should mention that we have this installed using Security Onion.. That's probably pertinent information!
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 26, 2019, 3:04pm UTC](https://discuss.elastic.co/t/issues-with-converting-parsed-logstash-logs-to-kibana-6-8-2/209708/9 "2019-12-26T15:04:21Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.