# Logstash class display "?"

**URL:** <https://discuss.elastic.co/t/logstash-class-display/63269>\
**Category:** 中文提问与讨论\
**Created:** [October 18, 2016, 9:20am UTC](https://discuss.elastic.co/t/logstash-class-display/63269 "2016-10-18T09:20:14Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![slowlizard](https://avatars.discourse-cdn.com/v4/letter/s/a9a28c/32.png) [@slowlizard](https://discuss.elastic.co/u/slowlizard)\
**Post date:** [October 18, 2016, 9:20am UTC](https://discuss.elastic.co/t/logstash-class-display/63269/1 "2016-10-18T09:20:14Z")

</div>

```auto
 "_index": "meipianapp-2016.10.18",
  "_type": "log4j",
  "_id": "AVfXDMl1egLz1PD_qnMm",
  "_score": null,
  "_source": {
    "message": "用户查询时光祭异常:MjController.userMjActivityPast: aMapCityCode:010",
    "@version": "1",
    "@timestamp": "2016-10-18T09:08:41.324Z",
    "timestamp": 1476781719183,
    "path": "com.meipian.core.api.controller.MjActivityController",
    "priority": "ERROR",
    "logger_name": "com.meipian.core.api.controller.MjActivityController",
    "thread": "http-bio-8080-exec-6",
    "class": "?",
    "file": "?:?",
    "method": "?",

```

请问为什么 class 和 file 和 method 是问号呢？

我的logstash配置如下：

```auto
nput {

  log4j {

    mode => "server"

    host => "0.0.0.0"

    port => 4567

    type => "log4j"

  }

}

    filter {

                date {

      match => ["timestamp" , "dd/MMM/yyyy:HH:mm:ss +0800"]

      timezone => "UTC"

           }

        }

output {

  elasticsearch {

     hosts=> ["10.105.103.125:9200"]

     index => "meipianapp-%{+YYYY.MM.dd}"

  }

}

```

---

<div class="post-metadata">

**Author:** ![Dan\_Zheng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dan_zheng/32/13032_2.png) [@Dan\_Zheng](https://discuss.elastic.co/u/Dan_Zheng)\
**Post date:** [November 8, 2016, 4:51am UTC](https://discuss.elastic.co/t/logstash-class-display/63269/2 "2016-11-08T04:51:48Z")

</div>

you should enable the LocationInfo such as:

`log4j.appender.socket.LocationInfo=true`

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:44pm UTC](https://discuss.elastic.co/t/logstash-class-display/63269/3 "2017-07-06T13:44:25Z")

</div>