# Logstash Filter Issue and Kibana

**URL:** https://discuss.elastic.co/t/logstash-filter-issue-and-kibana/89847
**Category:** Logstash
**Created:** [June 18, 2017, 12:31pm UTC](https://discuss.elastic.co/t/logstash-filter-issue-and-kibana/89847 "2017-06-18T12:31:50Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![wtran168](https://avatars.discourse-cdn.com/v4/letter/w/9d8465/32.png) [@wtran168](https://discuss.elastic.co/u/wtran168)
#### Post date: [June 18, 2017, 12:31pm UTC](https://discuss.elastic.co/t/logstash-filter-issue-and-kibana/89847/1 "2017-06-18T12:31:50Z")

</div>

I'm having an issue with my logstash filter. The fields are not showing up in Kibana. I can't see what I'm doing wrong.

I have used the rubydebug and the output looks fine.

```
grok {
  match => { "message" => "%{DATE} %{TIME} \[%{DATA:class}\] \[%{DATA:method}\] \[%{DATA:user}\] \[%{DATA:organization}\] \[%{DATA:workspace}\] \[%{DATA:duration_ms}\] \[%{DATA:url}\] \[%{DATA:parameters}\] \[%{DATA:service}\] \[%{DATA:status}\] \[%{DATA:status_code}\] \[%{DATA:service_error}\] \[%{DATA:message_id}\]" }
}
date {
  match => ["timestamp" , "dd/MM/yyyy HH:mm:ss.SS"]
}

```

Sample of the input:  
15/06/2017 21:10:19.629 [controller.content.FolderRESTJsonController] [getFolderContents] [UserID] [OrganizationID] [WorkspaceID] [34] [/tisco/documents/api/1.0/folders/FLD\_ROOT] [] [FLD\_BROWSE] [SUCCESS] [200] [] []  
15/06/2017 21:10:31.159 [controller.content.FolderRESTJsonController] [getFolderContents] [UserID] [OrganizationID] [WorkspaceID] [8] [/tisco/documents/api/1.0/folders/FLD\_ROOT] [] [FLD\_BROWSE] [SUCCESS] [200] [] []

Please point me to where I might be doing something wrong.

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [June 19, 2017, 9:26pm UTC](https://discuss.elastic.co/t/logstash-filter-issue-and-kibana/89847/2 "2017-06-19T21:26:19Z")

</div>

> The fields are not showing up in Kibana.

What, exactly, do you mean by this? Where aren't they showing up?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 17, 2017, 9:26pm UTC](https://discuss.elastic.co/t/logstash-filter-issue-and-kibana/89847/3 "2017-07-17T21:26:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.