# Log analysis finding what files didn't get processed

**URL:** <https://discuss.elastic.co/t/log-analysis-finding-what-files-didnt-get-processed/187052>\
**Category:** Elasticsearch\
**Created:** [June 24, 2019, 6:09am UTC](https://discuss.elastic.co/t/log-analysis-finding-what-files-didnt-get-processed/187052 "2019-06-24T06:09:29Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![raco](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raco/32/48614_2.png) [@raco](https://discuss.elastic.co/u/raco)\
**Post date:** [June 24, 2019, 6:09am UTC](https://discuss.elastic.co/t/log-analysis-finding-what-files-didnt-get-processed/187052/1 "2019-06-24T06:09:29Z")

</div>

Hi,  
This is my first time posting here, I tried looking for a similar question around but haven't been able to find a solution.

I'm using ElasticSearch and Kibana for my logs. Some process grabs one or more files and that file has to go through some states.  
Sometimes, one file, for some reason, don't get to the last step so there's no log saying that a file had status of completed.

ie:  
a function start processing a file and there's a log like this:  
indent preformatted text by 4 spaces  
{  
service: 'name-of-my-service',  
status: 'started',  
data: '{ "FILE": K00351}',  
}

other function grabs the same file and outputs another log saying almost the same but with different status  
{  
service: 'name-of-my-service',  
status: 'completed',  
data: '{ "FILE": K00351}',  
}

So...my question: is there anyway to get the name of the file who didn't complete? (status=completed)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 22, 2019, 6:09am UTC](https://discuss.elastic.co/t/log-analysis-finding-what-files-didnt-get-processed/187052/2 "2019-07-22T06:09:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.