# Logs in duplicate

**URL:** <https://discuss.elastic.co/t/logs-in-duplicate/217762>\
**Category:** Kibana\
**Created:** [February 4, 2020, 10:03am UTC](https://discuss.elastic.co/t/logs-in-duplicate/217762 "2020-02-04T10:03:45Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Robin\_Coda](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/robin_coda/32/62004_2.png) [@Robin\_Coda](https://discuss.elastic.co/u/Robin_Coda)\
**Post date:** [February 4, 2020, 10:03am UTC](https://discuss.elastic.co/t/logs-in-duplicate/217762/1 "2020-02-04T10:03:45Z")

</div>

Hello, In Kibana i see different logs in duplicate, I don't know for what.

Can you explain me this please.

Thank's

---

<div class="post-metadata">

**Author:** ![nickpeihl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nickpeihl/32/112622_2.png) [@nickpeihl](https://discuss.elastic.co/u/nickpeihl)\
**Post date:** [February 4, 2020, 6:37pm UTC](https://discuss.elastic.co/t/logs-in-duplicate/217762/2 "2020-02-04T18:37:40Z")

</div>

Hi @Robin_Coda. Sorry, I need more information to help you. How are the logs getting ingested? What duplicate logs are you seeing? Can you share a screenshot?

---

<div class="post-metadata">

**Author:** ![Robin\_Coda](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/robin_coda/32/62004_2.png) [@Robin\_Coda](https://discuss.elastic.co/u/Robin_Coda)\
**Post date:** [February 5, 2020, 8:26am UTC](https://discuss.elastic.co/t/logs-in-duplicate/217762/3 "2020-02-05T08:26:41Z")

</div>

Hi @nickpeihl, logs are generated via winlogbeat and logstash, duplicate logs are:

 ![Capture2](https://us1.discourse-cdn.com/elastic/original/3X/0/b/0bc89ad53c108dfead18baa0cf03aab1bd8ad097.png)

---

<div class="post-metadata">

**Author:** ![nickpeihl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nickpeihl/32/112622_2.png) [@nickpeihl](https://discuss.elastic.co/u/nickpeihl)\
**Post date:** [February 6, 2020, 1:06am UTC](https://discuss.elastic.co/t/logs-in-duplicate/217762/4 "2020-02-06T01:06:10Z")

</div>

Hi @Robin_Coda. Can you tell me if the duplicate logs have the same `_id`?

---

<div class="post-metadata">

**Author:** ![Robin\_Coda](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/robin_coda/32/62004_2.png) [@Robin\_Coda](https://discuss.elastic.co/u/Robin_Coda)\
**Post date:** [February 6, 2020, 8:18am UTC](https://discuss.elastic.co/t/logs-in-duplicate/217762/5 "2020-02-06T08:18:28Z")

</div>

hi @nickpeihl. no the duplicate logs don't have the same \_id

---

<div class="post-metadata">

**Author:** ![nickpeihl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nickpeihl/32/112622_2.png) [@nickpeihl](https://discuss.elastic.co/u/nickpeihl)\
**Post date:** [February 6, 2020, 8:44pm UTC](https://discuss.elastic.co/t/logs-in-duplicate/217762/6 "2020-02-06T20:44:36Z")

</div>

HI @Robin_Coda. In that case, I do not think Kibana is the culprit. You may want to check that your beats configurations are correct. Or maybe reach out on the [winlogbeat Discuss forum](https://discuss.elastic.co/c/beats/winlogbeat/45).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 5, 2020, 8:44pm UTC](https://discuss.elastic.co/t/logs-in-duplicate/217762/7 "2020-03-05T20:44:37Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.