# Parse CSV file through logstasj

**URL:** <https://discuss.elastic.co/t/parse-csv-file-through-logstasj/131291>\
**Category:** Logstash\
**Created:** [May 10, 2018, 11:02am UTC](https://discuss.elastic.co/t/parse-csv-file-through-logstasj/131291 "2018-05-10T11:02:15Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![shrikantgulia](https://avatars.discourse-cdn.com/v4/letter/s/c68b51/32.png) [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Post date:** [May 10, 2018, 11:02am UTC](https://discuss.elastic.co/t/parse-csv-file-through-logstasj/131291/1 "2018-05-10T11:02:15Z")

</div>

I have some csv format data .how to parse that data as i am missing some fields from the data

---

<div class="post-metadata">

**Author:** ![pjanzen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pjanzen/32/13756_2.png) [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Post date:** [May 10, 2018, 5:30pm UTC](https://discuss.elastic.co/t/parse-csv-file-through-logstasj/131291/2 "2018-05-10T17:30:38Z")

</div>

Hi Shrikant,

There no information to go on here, without information we cannot help you.  
I do want to point you to the logstash [csv filter plugin](https://www.elastic.co/guide/en/logstash/6.0/plugins-filters-csv.html)

If you need any help please provide the following information and data:

1. logstash version.
2. Your logstash filter (what you have so far)
3. Some example data (anonymized when needed)
4. A proper explanation of you problem and what you are trying to accomplish.

Regards,  
Paul.

---

<div class="post-metadata">

**Author:** ![shrikantgulia](https://avatars.discourse-cdn.com/v4/letter/s/c68b51/32.png) [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Post date:** [May 11, 2018, 5:51am UTC](https://discuss.elastic.co/t/parse-csv-file-through-logstasj/131291/3 "2018-05-11T05:51:23Z")

</div>

Hello Pjanzen  
Thankyou for your reply

I am faacing issue as i parsed the csv file and in IP field i am not getting the full IP.  
I am only getting first 2 terms terms out of the IP.  
I am using ELK 5.4 version

Regards  
Shrikant

---

<div class="post-metadata">

**Author:** ![Mojster](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mojster/32/21209_2.png) [@Mojster](https://discuss.elastic.co/u/Mojster)\
**Post date:** [May 11, 2018, 6:31am UTC](https://discuss.elastic.co/t/parse-csv-file-through-logstasj/131291/4 "2018-05-11T06:31:03Z")

</div>

And some example data please.  
Just copy here 2-5 lines so your problem can be recreated.

---

<div class="post-metadata">

**Author:** ![pjanzen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pjanzen/32/13756_2.png) [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Post date:** [May 11, 2018, 4:57pm UTC](https://discuss.elastic.co/t/parse-csv-file-through-logstasj/131291/5 "2018-05-11T16:57:22Z")

</div>

Hi Shrikant,

Again please provide sample data and your config.  
It also might be a idea to post your question [in you native language](https://discuss.elastic.co/c/in-your-native-tongue) this might help in you exploring the ELK possibilities..

Regard,  
Paul.

---

<div class="post-metadata">

**Author:** ![Mojster](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mojster/32/21209_2.png) [@Mojster](https://discuss.elastic.co/u/Mojster)\
**Post date:** [May 14, 2018, 5:17am UTC](https://discuss.elastic.co/t/parse-csv-file-through-logstasj/131291/6 "2018-05-14T05:17:45Z")

</div>

It's better to post in english (if it's fluent enough), than in native language.  
It has wider audience.

---

<div class="post-metadata">

**Author:** ![shrikantgulia](https://avatars.discourse-cdn.com/v4/letter/s/c68b51/32.png) [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Post date:** [May 14, 2018, 5:37am UTC](https://discuss.elastic.co/t/parse-csv-file-through-logstasj/131291/7 "2018-05-14T05:37:33Z")

</div>

Hello  
Thankyou for the reply  
It has been solved as i changed the term from integer to string.

Regards  
Shrikant

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 11, 2018, 5:37am UTC](https://discuss.elastic.co/t/parse-csv-file-through-logstasj/131291/8 "2018-06-11T05:37:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
