# No field for severity , for logs coming from log4j

**URL:** <https://discuss.elastic.co/t/no-field-for-severity-for-logs-coming-from-log4j/54506>\
**Category:** Logstash\
**Created:** [July 1, 2016, 6:35am UTC](https://discuss.elastic.co/t/no-field-for-severity-for-logs-coming-from-log4j/54506 "2016-07-01T06:35:57Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![babeesh](https://avatars.discourse-cdn.com/v4/letter/b/e47c2d/32.png) [@babeesh](https://discuss.elastic.co/u/babeesh)\
**Post date:** [July 1, 2016, 6:35am UTC](https://discuss.elastic.co/t/no-field-for-severity-for-logs-coming-from-log4j/54506/1 "2016-07-01T06:35:57Z")

</div>

There is no field for Severity/Priority in log4j logs.  
Logstash version 2.2.x

log4j config:

```
    log4j.rootLogger=stdout
    log4j.appender.stdout=org.apache.log4j.net.SocketAppender
    log4j.appender.stdout.port=5050
    log4j.appender.stdout.remoteHost=x.x.x.x

```

logstash config :

```
input {
   log4j{
      port =>5050
      type => 'log4j'
      codec => "json"
        }
}

output {  
 elasticsearch {
       hosts => ['172.30.0.148:9200']
          }
 }

```

And a log looks like:

```
@timestamp July 1st 2016, 11:30:18.775
t@version 1
t_id AVWlCybQRaRyYuJtS1Ke
t_index logstash-2016.07.01
#_score	  	
t_type log4j
thost x.x.x.x
?message ZmdcCopyLookupRequiredZndcLookupRequiredJ	timeStampLcategoryNametLjava/lang/String;LlocationInfot#Lorg/apache/log4j/spi/LocationInfo;LamdcCopytLjava/util/Hashtable;Lndcq~LrenderedMessageq~L
?port 60165
?tags _jsonparsefailure
?type log4j

```

I used a filter from below git page

> <https://gist.github.com/dsummersl/3744192>

But there were configuration errors and logstash stops running while using this filter.

How can I add severity field here?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:49am UTC](https://discuss.elastic.co/t/no-field-for-severity-for-logs-coming-from-log4j/54506/2 "2017-07-06T04:49:58Z")

</div>