# Logstash Kusto - No timestamp getting generated automatically as earlier

**URL:** <https://discuss.elastic.co/t/logstash-kusto-no-timestamp-getting-generated-automatically-as-earlier/268084>\
**Category:** Logstash\
**Created:** [March 23, 2021, 11:16am UTC](https://discuss.elastic.co/t/logstash-kusto-no-timestamp-getting-generated-automatically-as-earlier/268084 "2021-03-23T11:16:28Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![omkarg81](https://avatars.discourse-cdn.com/v4/letter/o/e495f1/32.png) [@omkarg81](https://discuss.elastic.co/u/omkarg81)\
**Post date:** [March 23, 2021, 11:16am UTC](https://discuss.elastic.co/t/logstash-kusto-no-timestamp-getting-generated-automatically-as-earlier/268084/1 "2021-03-23T11:16:28Z")

</div>

I have a Winlogbeat --\> Logstash --\> Azure Data Explorer logging system, but somehow, since last few days, the debug logs that I have activated on logstash is showing that the tmp file written by ADX before the logs are ingested to ADX, is showing a blank file name instead of auto generated time stamp I'm using.

My logstash config is

```
kusto {
path => "/usr/share/logstash/%{+YYYY-MM-dd-HH-mm-ss}.txt"
ingest_url => "kusto ingest url"
app_id => "AzureAD App Id"
app_key => "Azure AD secret key"
app_tenant => "Azure AD tenant id"
database => "dbname"
table => "tablename"
json_mapping => "jsonmapping"
}

```

Also, the error showing in the logs is -

```
[DEBUG] 2021-03-23 11:03:47.905 [[main]>worker2] kusto - Writing event to tmp file. 
{:filename=>"/usr/share/logstash/.txt.dbname.tablename"}

```

Here the .txt.dbname.tablename should have been something like 2021-03-21-03:09:00.txt.dbname.tablename, but it is not coming that way.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 20, 2021, 11:17am UTC](https://discuss.elastic.co/t/logstash-kusto-no-timestamp-getting-generated-automatically-as-earlier/268084/2 "2021-04-20T11:17:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.