# Logstash not parsing log4j tcp dump

**URL:** <https://discuss.elastic.co/t/logstash-not-parsing-log4j-tcp-dump/180343>\
**Category:** Logstash\
**Created:** [May 9, 2019, 11:18am UTC](https://discuss.elastic.co/t/logstash-not-parsing-log4j-tcp-dump/180343 "2019-05-09T11:18:39Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![shruti1](https://avatars.discourse-cdn.com/v4/letter/s/6bbea6/32.png) [@shruti1](https://discuss.elastic.co/u/shruti1)\
**Post date:** [May 9, 2019, 11:18am UTC](https://discuss.elastic.co/t/logstash-not-parsing-log4j-tcp-dump/180343/1 "2019-05-09T11:18:40Z")

</div>

I am having log4j.properties with tcp socket appender and I am seeing tcp dump. Also logstash is starting with log4j listener though no entry of data in logstash.

---

<div class="post-metadata">

**Author:** ![staodd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/staodd/32/24509_2.png) [@staodd](https://discuss.elastic.co/u/staodd)\
**Post date:** [May 13, 2019, 10:34pm UTC](https://discuss.elastic.co/t/logstash-not-parsing-log4j-tcp-dump/180343/2 "2019-05-13T22:34:47Z")

</div>

Please include more info and configuration if people are to be able to help you. Is it on different host? Where did you run tcpdump? What does the logs say? The more information you can provide the higher possibility that someone can help you. And please format config and logs.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 10, 2019, 10:34pm UTC](https://discuss.elastic.co/t/logstash-not-parsing-log4j-tcp-dump/180343/3 "2019-06-10T22:34:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.