# Not getting parsed logs to Elasticsearch but able to see in logstash

**URL:** https://discuss.elastic.co/t/not-getting-parsed-logs-to-elasticsearch-but-able-to-see-in-logstash/147617
**Category:** Elasticsearch
**Created:** [September 6, 2018, 5:40pm UTC](https://discuss.elastic.co/t/not-getting-parsed-logs-to-elasticsearch-but-able-to-see-in-logstash/147617 "2018-09-06T17:40:30Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![rpendela](https://avatars.discourse-cdn.com/v4/letter/r/3be4f8/32.png) [@rpendela](https://discuss.elastic.co/u/rpendela)
#### Post date: [September 6, 2018, 5:40pm UTC](https://discuss.elastic.co/t/not-getting-parsed-logs-to-elasticsearch-but-able-to-see-in-logstash/147617/1 "2018-09-06T17:40:30Z")

</div>

Hello Community,

I am trying to parse simple log and here is my log and logstash parsed output.

```
2018-09-06 12:31:50,289 INFO [http-nio-8080-exec-10] [test@test.com] [POST - /platform-services/api/v1/static-data/picklist/delinquencyReasons] WebLoggingFilter - Iovation tracking disabled

```

Logstash o/p

```
logstash | {
logstash | "@version" => "1",
logstash | "Request-type" => "GET",
logstash | "field2" => "Request",
logstash | "tags" => [
logstash | [0] "webapp-prod",
logstash | [1] "platform-services"
logstash | ],
logstash | "beat" => {
logstash | "hostname" => "ip-10-2-1-245",
logstash | "version" => "6.4.0",
logstash | "ip" => "10.2.1.245",
logstash | "name" => "ip-10-2-1-245"
logstash | },
logstash | "field1" => "[http-nio-8080-exec-7]",
logstash | "offset" => 2039810,
logstash | "Severity" => "INFO",
logstash | "user" => "test@test.com",
logstash | "@timestamp" => 2018-09-06T10:09:24.591Z,
logstash | "source" => "/usr/share/tomcat8/logs/test.log",
logstash | "class-name" => "WebLoggingFilter",
logstash | "message" => "Iovation tracking disabled",
logstash | "prospector" => {
logstash | "type" => "log"
logstash | },
logstash | "Request" => "/platform-services/api/v1/static-data/picklist/delinquencyReasons",
logstash | "input" => {
logstash | "type" => "log"
logstash | },
logstash | "id" => "-"
logstash | }

```

I am using default filebeat template. I believe that is where I am having issue but I am expecting filebeat has default dynamic template which maps to strings . If I am wrong please suggest where exactly to check

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 4, 2018, 5:40pm UTC](https://discuss.elastic.co/t/not-getting-parsed-logs-to-elasticsearch-but-able-to-see-in-logstash/147617/2 "2018-10-04T17:40:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.