# Logstash-input-cloudwatch\_logs missing some CloudWatch log events
**URL:** https://discuss.elastic.co/t/logstash-input-cloudwatch-logs-missing-some-cloudwatch-log-events/191075
**Category:** Logstash
**Created:** [July 17, 2019, 7:19pm UTC](https://discuss.elastic.co/t/logstash-input-cloudwatch-logs-missing-some-cloudwatch-log-events/191075 "2019-07-17T19:19:04Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@timkitch](https://discuss.elastic.co/u/timkitch)
#### Post date: [July 17, 2019, 7:19pm UTC](https://discuss.elastic.co/t/logstash-input-cloudwatch-logs-missing-some-cloudwatch-log-events/191075/1 "2019-07-17T19:19:04Z")
We're using version 1.0.1 of the logstash-input-cloudwatch\_logs logstash plugin and are randomly encountering mysterious gaps in the CloudWatch log events. We periodically have an event that is clearly in CloudWatch that never appears in ElasticSearch and another instance of the same event later does get fetched by the plugin and appears in ES. Basically, we can trigger the same event to CloudWatch over and over and the plugin retrieves them most of the time, but randomly misses an event. The symptoms suggest there is some timing issue - possibly the missed event is coming into CloudWatch as the logstash-input-cloudwatch\_logs plugin is starting to poll. There's no evidence of any errors in the LogStash log file.
I've reviewed the code for the plugin and searched the bug list since v 1.0.1 to see whether this is a bug in the version we're using, but haven't found the issue reported anywhere. Not sure how to debug it.
---
### Author:  [@timkitch](https://discuss.elastic.co/u/timkitch)
#### Post date: [July 17, 2019, 7:41pm UTC](https://discuss.elastic.co/t/logstash-input-cloudwatch-logs-missing-some-cloudwatch-log-events/191075/2 "2019-07-17T19:41:17Z")
I may have found the issue. I missed this bug reported on this: [https://github.com/lukewaite/logstash-input-cloudwatch-logs/issues/47](https://github.com/lukewaite/logstash-input-cloudwatch-logs/issues/47). I'm guessing that's it. Hopefully, fixed when we upgrade.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 14, 2019, 7:45pm UTC](https://discuss.elastic.co/t/logstash-input-cloudwatch-logs-missing-some-cloudwatch-log-events/191075/3 "2019-08-14T19:45:22Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.