# Logs are not displaying with event wise

**URL:** <https://discuss.elastic.co/t/logs-are-not-displaying-with-event-wise/83643>\
**Category:** Logstash\
**Created:** [April 26, 2017, 3:43am UTC](https://discuss.elastic.co/t/logs-are-not-displaying-with-event-wise/83643 "2017-04-26T03:43:31Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Raja1](https://avatars.discourse-cdn.com/v4/letter/r/85f322/32.png) [@Raja1](https://discuss.elastic.co/u/Raja1)\
**Post date:** [April 26, 2017, 3:43am UTC](https://discuss.elastic.co/t/logs-are-not-displaying-with-event-wise/83643/1 "2017-04-26T03:43:31Z")

</div>

Hi All,

I am facing the strange issue, I am seeing the logs in file is 693400 lines but i am seeing 2222419 lines of logs in Kibana. Dont know how it was taken from my log file. I used multiline also but still the same. Please find the configuration below and suggest me to resolve this issue.

input  
{  
file  
{  
path =\> "/etc/logstash/ssg.log"  
codec =\> multiline {  
pattern =\> "(^%{TIMESTAMP\_ISO8601} )"  
negate =\> "true"  
what =\> "previous"  
}  
sincedb\_path =\> "/dev/null"  
}  
}  
filter  
{  
grok  
{  
match =\> {"message" =\> "%{SPACE}%{NOTSPACE}%{SPACE}%{GREEDYDATA}"}  
}  
}

output  
{  
elasticsearch  
{  
hosts =\> ["x.x.x.x:9200"]  
}  
stdout {codec =\> rubydebug }  
}

Thanks in advance.

Regards  
Raja

---

<div class="post-metadata">

**Author:** ![Raja1](https://avatars.discourse-cdn.com/v4/letter/r/85f322/32.png) [@Raja1](https://discuss.elastic.co/u/Raja1)\
**Post date:** [April 27, 2017, 3:03am UTC](https://discuss.elastic.co/t/logs-are-not-displaying-with-event-wise/83643/2 "2017-04-27T03:03:19Z")

</div>

I resolved the issue by making new grok patterns.

Thanks to elastic team for not giving any answer to my question...

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 27, 2017, 3:18am UTC](https://discuss.elastic.co/t/logs-are-not-displaying-with-event-wise/83643/3 "2017-04-27T03:18:17Z")

</div>

You are very welcomed. Your message is encouraging me not to answer to any of your messages.

Did you read this page?

> [@About the Elasticsearch category](https://discuss.elastic.co/t/about-the-elasticsearch-category/21/1):
>
> The heart of the free and open Elastic Stack Elasticsearch is a distributed, RESTful search and analytics engine capable of addressing a growing number of use cases. As the heart of the Elastic Stack, it centrally stores your data for lightning fast search, fine‑tuned relevancy, and powerful analytics that scale with ease. warning PLEASE READ THIS SECTION IF IT'S YOUR FIRST POST Some useful links: [elasticsearch reference guide](http://www.elastic.co/guide/en/elasticsearch/reference/current/index.html)[elasticsearch user guide](http://www.elastic.co/guide/en/elasticsearch/guide/current/index.html)[elasticsearch plugins](https://www.elastic.co/guide/en/elasticsearch/plugins/current/index.html)[elasticsearch cl…](https://www.elastic.co/guide/en/elasticsearch/client/index.html)

If not please look at the "Also be patient" part.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 27, 2017, 3:19am UTC](https://discuss.elastic.co/t/logs-are-not-displaying-with-event-wise/83643/4 "2017-04-27T03:19:30Z")

</div>

And BTW I'm moving your thread to #logstash as you posted it in the wrong place IMO.

---

<div class="post-metadata">

**Author:** ![Raja1](https://avatars.discourse-cdn.com/v4/letter/r/85f322/32.png) [@Raja1](https://discuss.elastic.co/u/Raja1)\
**Post date:** [April 27, 2017, 3:21am UTC](https://discuss.elastic.co/t/logs-are-not-displaying-with-event-wise/83643/5 "2017-04-27T03:21:58Z")

</div>

I hope you misunderstood me.Not any of my messages. Its only specific to this question.

Because of you didn't reply to this question I have debugged my own and able to resolved.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 25, 2017, 3:31am UTC](https://discuss.elastic.co/t/logs-are-not-displaying-with-event-wise/83643/6 "2017-05-25T03:31:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.