# Problem with Version 2.3. Host and Timestamp

**URL:** <https://discuss.elastic.co/t/problem-with-version-2-3-host-and-timestamp/46961>\
**Category:** Logstash\
**Created:** [April 11, 2016, 8:39am UTC](https://discuss.elastic.co/t/problem-with-version-2-3-host-and-timestamp/46961 "2016-04-11T08:39:25Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![diwertowski](https://avatars.discourse-cdn.com/v4/letter/d/ac91a4/32.png) [@diwertowski](https://discuss.elastic.co/u/diwertowski)\
**Post date:** [April 11, 2016, 8:39am UTC](https://discuss.elastic.co/t/problem-with-version-2-3-host-and-timestamp/46961/1 "2016-04-11T08:39:25Z")

</div>

I upgraded logstash to Version 2.3. (Shipper, Indexer is 2.2.)  
Did not changed anything in my config, but the output on the Indexer is different.

**Shipper Config:**

input {  
file {  
type =\> "log4j"  
path =\> ...  
start\_position =\> beginning  
sincedb\_path =\> null  
}  
}  
output  
redis {  
host =\> ["\*\*\*"]  
port =\> 6379  
data\_type =\> "list"  
key =\> "logstash"  
codec =\> plain { charset =\> "ISO-8859-1" }  
}

**Indexer config**

input {  
redis {  
host =\> "127.0.0.1"  
port =\> 6379  
data\_type =\> "list"  
key =\> "logstash"  
}  
}  
output {  
stdout{}  
}

if I start the shipper with 2.2. everythings fine.  
here are the different outputs from **indexer**  
2.2.:  
2016-04-11T08:26:37.705Z SERVERNAME MESSAGE  
2.3:  
2016-04-11T10:36:37.705Z %{host }2016-04-11T08:26:37.705Z SERVERNAME MESSAGE

Outputs from Shipper are the same in 2.2. and 2.3.  
Why does Logstash create two timestamps and whats %{host}?  
Is something new with the codec-configuration?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:02am UTC](https://discuss.elastic.co/t/problem-with-version-2-3-host-and-timestamp/46961/2 "2017-07-06T05:02:57Z")

</div>

Closed on July 6, 2017, 5:02am UTC