# Logs missing in logtrail

**URL:** <https://discuss.elastic.co/t/logs-missing-in-logtrail/157320>\
**Category:** Kibana\
**Created:** [November 19, 2018, 9:35am UTC](https://discuss.elastic.co/t/logs-missing-in-logtrail/157320 "2018-11-19T09:35:12Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![shaheryar](https://avatars.discourse-cdn.com/v4/letter/s/b5ac83/32.png) [@shaheryar](https://discuss.elastic.co/u/shaheryar)\
**Post date:** [November 19, 2018, 9:35am UTC](https://discuss.elastic.co/t/logs-missing-in-logtrail/157320/1 "2018-11-19T09:35:12Z")

</div>

I am facing an issue where my logs are being successfully stored in ES and visible on Kibana but logtrail is missing specific log entries each time.

 ![Screenshot%20from%202018-11-19%2014-25-33](https://us1.discourse-cdn.com/elastic/original/3X/5/1/51fccfc1cb4cf813198b9b8fa65478dcf313e5b0.png) ![Screenshot%20from%202018-11-19%2014-26-06](https://us1.discourse-cdn.com/elastic/original/3X/0/e/0ea54b1c67a0f67c75ec6e5067daefcf71691763.png)

{  
"version" : 1,  
"index\_patterns" : [  
{  
"es": {  
"default\_index": "logstash-\*"  
},  
"tail\_interval\_in\_seconds": 6,  
"es\_index\_time\_offset\_in\_seconds": 0,  
"display\_timezone": "local",  
"display\_timestamp\_format": "MMM DD HH:mm:ss",  
"max\_buckets": 500,  
"default\_time\_range\_in\_days" : 0,  
"max\_hosts": 100,  
"max\_events\_to\_keep\_in\_viewer": 5000,  
"fields" : {  
"mapping" : {  
"timestamp" : "@timestamp",  
"hostname" : "host",  
"message": "message"  
},  
"message\_format": "{{msg}}"  
},  
"color\_mapping" : {  
"field": "level",  
"mapping": {  
"error": "rgb(212, 15, 15)"  
}  
}  
}

]  
}

---

<div class="post-metadata">

**Author:** ![shaheryar](https://avatars.discourse-cdn.com/v4/letter/s/b5ac83/32.png) [@shaheryar](https://discuss.elastic.co/u/shaheryar)\
**Post date:** [November 19, 2018, 10:02am UTC](https://discuss.elastic.co/t/logs-missing-in-logtrail/157320/2 "2018-11-19T10:02:11Z")

</div>

I have two different environment. code for generating the logs is same and for both environments logs get saved in ES successfully and fetched by kibana but logtrail is missing logs for one environment and working fine for the other environment.

log parsed by logstash and appearing on logtrail for successful env

{  
"EnvId" =\> "5b6abf6413c2970012a5719c",  
"SRVC" =\> "5b6abd8613c2970012a57197",  
"host" =\> "172.18.0.1",  
"level" =\> "info",  
"message" =\> "{"EnvId":"5b6abf6413c2970012a5719c","FE":"true","PKG":"HA-CT-Pkg2","SRVC":"5b6abd8613c2970012a57197","Type":"FERL","level":"info","msg":"checking endpoint.... ","source":"notifier/Logging.go:41","time":"2018-11-19T07:56:25Z"}",  
"source" =\> "notifier/Logging.go:41",  
"time" =\> "2018-11-19T07:56:25Z",  
"PKG" =\> "HA-CT-Pkg2",  
"port" =\> 48674,  
"@timestamp" =\> 2018-11-19T07:56:25.067Z,  
"@version" =\> "1",  
"msg" =\> "checking endpoint.... ",  
"Type" =\> "FERL",  
"FE" =\> "true"  
}

log parsed by logstash and appearing on kibana but not logtrail.

{  
"EnvId" =\> "5bf264dba7d8f70020000008",  
"SRVC" =\> "5b31f2805b13b30012730e98",  
"host" =\> "172.18.0.1",  
"level" =\> "error",  
"message" =\> "{"EnvId":"5bf264dba7d8f70020000008","FE":"true","PKG":"CR-AWS","SRVC":"5b31f2805b13b30012730e98","Type":"FERL","level":"error","msg":"Cannot create subnet group for rds ","source":"notifier/Logging.go:34","time":"2018-11-19T07:56:11Z"}",  
"source" =\> "notifier/Logging.go:34",  
"time" =\> "2018-11-19T07:56:11Z",  
"PKG" =\> "CR-AWS",  
"port" =\> 48674,  
"@timestamp" =\> 2018-11-19T07:56:11.050Z,  
"@version" =\> "1",  
"msg" =\> "Cannot create subnet group for rds ",  
"Type" =\> "FERL",  
"FE" =\> "true"  
}

---

<div class="post-metadata">

**Author:** ![spalger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spalger/32/14092_2.png) [@spalger](https://discuss.elastic.co/u/spalger)\
**Post date:** [November 21, 2018, 2:03am UTC](https://discuss.elastic.co/t/logs-missing-in-logtrail/157320/3 "2018-11-21T02:03:05Z")

</div>

I suggest filing an issue with logtrail [https://github.com/sivasamyk/logtrail/issues](https://github.com/sivasamyk/logtrail/issues). I've never used the plugin and have no idea how it works.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 19, 2018, 2:03am UTC](https://discuss.elastic.co/t/logs-missing-in-logtrail/157320/4 "2018-12-19T02:03:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.