# Logstash did not parse weblogic log from local ELK stack server

**URL:** <https://discuss.elastic.co/t/logstash-did-not-parse-weblogic-log-from-local-elk-stack-server/167880>\
**Category:** Logstash\
**Created:** [February 11, 2019, 3:08pm UTC](https://discuss.elastic.co/t/logstash-did-not-parse-weblogic-log-from-local-elk-stack-server/167880 "2019-02-11T15:08:31Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![anguyen98](https://avatars.discourse-cdn.com/v4/letter/a/f6c823/32.png) [@anguyen98](https://discuss.elastic.co/u/anguyen98)\
**Post date:** [February 11, 2019, 3:08pm UTC](https://discuss.elastic.co/t/logstash-did-not-parse-weblogic-log-from-local-elk-stack-server/167880/1 "2019-02-11T15:08:31Z")

</div>

Please help me out I have configure full ELK Stack to parse our Weblogic log but somehow it did not pickup the log and parse it. Everything is working but when I ran.  
curl -XGET '[http://testweblogic.net:9200/filebeat-\*/\_search?pretty](http://testweblogic.net:9200/filebeat-*/_search?pretty)' and here is the output.

{  
"took" : 0,  
"timed\_out" : false,  
"\_shards" : {  
"total" : 0,  
"successful" : 0,  
"skipped" : 0,  
"failed" : 0  
},  
"hits" : {  
"total" : 0,  
"max\_score" : 0.0,  
"hits" :   
}  
}

here is my logstash.conf

input {  
file {  
path =\> "/var/weblogic/log/\*.log"  
start\_position =\> beginning  
}  
}  
filter {  
grok {  
match =\> ["message", "\<%{DATA:log\_timestamp}\> \<%{WORD:log\_level}\> \<%{WORD:thread}\> \<%{HOSTNAME:hostname}\> \<%{HOSTNAME:servername}\> \<%{DATA:timer}\> \<\<%{DATA:kernel}\>\> \<\> \<%{DATA:uuid}\> \<%{NUMBER:timestamp}\> \<%{DATA:misc}\> \<%{DATA:log\_number}\> \<%{DATA:log\_message}\>"]  
}  
}  
output {  
elasticsearch {  
hosts =\> ["[testweblogic.net:9200](http://testweblogic.net:9200)"]  
}  
}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 11, 2019, 3:08pm UTC](https://discuss.elastic.co/t/logstash-did-not-parse-weblogic-log-from-local-elk-stack-server/167880/2 "2019-03-11T15:08:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.