# JMX logs filter

**URL:** <https://discuss.elastic.co/t/jmx-logs-filter/74292>\
**Category:** Logstash\
**Created:** [February 7, 2017, 10:11pm UTC](https://discuss.elastic.co/t/jmx-logs-filter/74292 "2017-02-07T22:11:03Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![bob-bza](https://avatars.discourse-cdn.com/v4/letter/b/9f8e36/32.png) [@bob-bza](https://discuss.elastic.co/u/bob-bza)\
**Post date:** [February 7, 2017, 10:11pm UTC](https://discuss.elastic.co/t/jmx-logs-filter/74292/1 "2017-02-07T22:11:03Z")

</div>

## E, [2017-02-07T21:26:34.425421] ERROR -- : The collection MetricData must not have a size greater than 20. (Aws::CloudWatch::Errors::InvalidParameterValue) /usr/local/share/ruby/gems/2.0/gems/aws-sdk-core-2.6.49/lib/seahorse/client/plugins/raise\_response\_errors.rb:15:in `call' /usr/local/share/ruby/gems/2.0/gems/aws-sdk-core-2.6.49/lib/aws-sdk-core/plugins/idempotency_token.rb:18:in`call' /usr/local/share/ruby/gems/2.0/gems/aws-sdk-core-2.6.49/lib/seahorse/client/base.rb:207:in `block (2 levels) in define_operation_methods' ./kafka_jmx_telemetry:303:in`block (2 levels) in ' ./kafka\_jmx\_telemetry:296:in `each'

i have my sample data like this

## My filter was file E, [%{TIMESTAMP\_ISO8601:time}]\s+%{LOGLEVEL:log-level}(?:-|%{USER:auth}) (?::|%{USER:auth})?%{DATA:message}

## MATCHED time 2017-02-07T21:26:34.425421 log-level ERR auth -- message after match: : The collection MetricData must not have a size greater than 20. (Aws::CloudWatch::Errors::InvalidParameterValue) /usr/local/share/ruby/gems/2.0/gems/aws-sdk-core-2.6.49/lib/seahorse/client/plugins/raise\_response\_errors.rb:15:in `call' NOT MATCHED. The longest regex prefix matching the beginning of this line is as follows: prefix after match:	/usr/local/share/ruby/gems/2.0/gems/aws-sdk-core-2.6.49/lib/seahorse/client/plugins/raise_response_errors.rb:15:in`call' /usr/local/share/ruby/gems/2.0/gems/aws-sdk-core-2.6.49/lib/aws-sdk-core/plugins/idempotency\_token.rb:18:in `call'

I tried multiple ways but dint work for me any idea where i was doing wrong in my filter.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 7, 2017, 10:11pm UTC](https://discuss.elastic.co/t/jmx-logs-filter/74292/2 "2017-03-07T22:11:27Z")

</div>

Closed on March 7, 2017, 10:11pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.