# Metrics Output Issue

**URL:** https://discuss.elastic.co/t/metrics-output-issue/24248
**Category:** Logstash
**Created:** [June 24, 2015, 9:31am UTC](https://discuss.elastic.co/t/metrics-output-issue/24248 "2015-06-24T09:31:41Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![gromit](https://avatars.discourse-cdn.com/v4/letter/g/ac8455/32.png) [@gromit](https://discuss.elastic.co/u/gromit)
#### Post date: [June 24, 2015, 9:31am UTC](https://discuss.elastic.co/t/metrics-output-issue/24248/1 "2015-06-24T09:31:42Z")

</div>

I'm using Logstash 1.5.1 with the latest metrics plugin.  
At the end of the filters section I have the following get metrics for windows accounts lockouts:

if [EventID] == 4740 {  
metrics {  
meter =\> "lockouts"  
add\_tag =\> "metric"  
add\_field =\> { "lockout\_trigger" =\> "true" }  
clear\_interval =\> 3600  
}  
}

I added the add\_field to test if the conditional was working.  
When the EventID matches 4740 the metrics filter does not give any output and the field lockout\_trigger is not created.

Can't figure out whatt the issue is.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 5:36am UTC](https://discuss.elastic.co/t/metrics-output-issue/24248/2 "2017-07-06T05:36:39Z")

</div>